Description
An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sophos | SG UTM | unspecified – < 9.708 MR8 | 9.708 MR8 |
High · 8.8
CVE-2021-36807
EUVD-2021-23383GHSA-3rf7-6c99-mx43
An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8.
Published Nov 26, 2021 · Updated Aug 4, 2024 · Assigned by Sophos