CVE-2021-36806

CVE-2021-36806 describes a reflected Cross-Site Scripting (XSS) flaw in Sophos Email Appliance that enables an open redirect when a user visits a maliciously crafted link to an error page. Affected products are Sophos Email Appliance versions older than 4.5.3.4. The vulnerability arises from inad...