Description (CNA)
Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Sophos / Sophos UTM | affected unspecified through 9.705 |
CWE
No CWE identifiers supplied.
References
- https://community.sophos.com/utm-firewall/b/blog/posts/utm-up2date-9-706-released
- http://seclists.org/fulldisclosure/2021/Dec/3
ADP enrichment
No English description supplied.