Dell AppSync Improper Restriction of XML External Entity Reference Vulnerability

A vulnerability allowing improper restriction of XML external entity references has been identified in Dell AppSync version 4.6.0.0. This issue could be exploited by a low-privileged attacker with local access, potentially leading to unauthorized information disclosure and information tampering.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information and the ability to modify data within the application.

Remediation

Users can upgrade to Dell AppSync version 4.6.0.4 or later to address this vulnerability. The update is available for download from the Dell Download Center.