Reflected XSS Vulnerability in Sophos Email Appliance

CVE-2021-36806

What is CVE-2021-36806?

A reflected XSS vulnerability in Sophos Email Appliance permits attackers to craft a malicious link that redirects users to an error page. When recipients click on such links, they unknowingly expose themselves to potential security threats, as the link may execute arbitrary scripts. This issue affects all versions of Sophos Email Appliance released prior to version 4.5.3.4, highlighting the need for timely updates to mitigate such risks.

References