CVE-2023-1671 (published 2023-04-04T00:00:00)
A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.
Affected products: Vendor: Sophos
Product: Sophos Web Appliance
Versions: unspecified