CVE-2018-16118

CVE-2018-16118 affects Sophos XG firewall, API Configuration component: /webconsole/APIController. A shell escape flaw allows remote attackers to execute arbitrary OS commands via shell metacharacters in the X-Forwarded-for header. Documents confirm the vulnerability and affected software (17.0.8...