Description
A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Sophos Firewall | Sophos / Sophos Firewall | >= unspecified, <= 18.5 MR4 | affected |
| Sophos Firewall | Sophos / Sophos Firewall | >= unspecified, <= 19.0 MR1 | affected |