CVE-2023-1671 — Sophos Web Appliance Command Injection Vulnerability

CISA KEVExploited: confirmedSophos

Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution.

Vulnerability details