CVE-2021-25273

Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706...

CVE-2021-25273

Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706...

CVE-2021-25273

CVE-2021-25273 is a stored XSS affecting Sophos UTM prior to version 9.706, exploitable in the quarantined email details view from the admin perspective. The root cause is a stored XSS flaw that allows an attacker to execute script in an administrator’s browser. Multiple connected sources confirm...