Multiple XSS Vulnerabilities in Sophos Firewall by Sophos

CVE-2021-25267

What is CVE-2021-25267?

Multiple Cross-Site Scripting (XSS) vulnerabilities in the Webadmin interface of Sophos Firewall can lead to unauthorized privilege escalation. An attacker with access to the admin panel can exploit these vulnerabilities to elevate their privileges to a super-admin level, compromising the security integrity of the firewall. Versions of Sophos Firewall prior to 19.0 GA are susceptible to these risks, emphasizing the need for timely updates and robust security practices.

References