Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-36932

In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), multiple SQL injection vulnerabilities have been identified in the MOVEit Transfer web application that could allow an authenticated attacker to gain unauthorized access to the MOVEit Transfer database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint that could result in modification and disclosure of MOVEit database content.

Published

2023-07-05T16:15:09.687

Last Modified

2024-11-21T08:10:56.757

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.1 (HIGH)

Weaknesses
  • Type: Primary
    CWE-89
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application progress moveit_transfer < 2020.1.11 Yes
Application progress moveit_transfer < 2021.0.9 Yes
Application progress moveit_transfer < 2021.1.7 Yes
Application progress moveit_transfer < 2022.0.7 Yes
Application progress moveit_transfer < 2022.1.8 Yes
Application progress moveit_transfer < 2023.0.4 Yes
References