Medium · 4.3 CVE-2022-48309 EUVD-2022-51009GHSA-jmc8-jw39-cq2w

A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versions older than 2.2.90.

Published Mar 1, 2023 · Updated Mar 7, 2025 · Assigned by Sophos

Description

Vendor	Product	Affected	Fixed
Sophos	Sophos Connect Client	unspecified – < 2.2.90	2.2.90