CVE-2018-16118
Published
CVSS v3
N/A
CVSS v2
9.3
HIGH
Affected
1
PROJECT
Description
A shell escape vulnerability in /webconsole/APIController in the API Configuration component of Sophos XG firewall 17.0.8 MR-8 allows remote attackers to execute arbitrary OS commands via shell metachracters in the "X-Forwarded-for" HTTP header.
GitHub