Medium · 4.7 CVE-2021-36806 EUVD-2021-23382GHSA-f39q-q9f3-6vmw

A reflected XSS vulnerability allows an open redirect when the victim clicks a malicious link to an error page on Sophos Email Appliance ol…

Published Nov 30, 2023 · Updated Dec 2, 2024 · Assigned by Sophos

Description

A reflected XSS vulnerability allows an open redirect when the victim clicks a malicious link to an error page on

Sophos Email Appliance

older than version 4.5.3.4.

Vendor	Product	Affected	Fixed
Sophos	Sophos Email Appliance	4.5.3.3	—