A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in the User Portal of Sophos Firewall older than version 19.5 GA.

Related CVEs

CVE-2022-3711

Key Information

GHSA ID

GHSA-8jm7-jj8h-v5xq

Published

December 1, 2022 6:30 PM

Last Modified

December 2, 2022 9:30 PM

CVSS Score

5.0 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: September 30, 2025 6:30 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.