Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-42660

In Progress MOVEit Transfer versions released before 2021.1.8 (13.1.8), 2022.0.8 (14.0.8), 2022.1.9 (14.1.9), 2023.0.6 (15.0.6), a SQL injection vulnerability has been identified in the MOVEit Transfer machine interface that could allow an authenticated attacker to gain unauthorized access to the MOVEit Transfer database. An attacker could submit a crafted payload to the MOVEit Transfer machine interface which could result in modification and disclosure of MOVEit database content.

Published

2023-09-20T17:15:11.550

Last Modified

2024-11-21T08:22:54.447

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-89
  • Type: Primary
    CWE-89
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application progress moveit_transfer < 2021.1.8 Yes
Application progress moveit_transfer < 2022.0.8 Yes
Application progress moveit_transfer < 2022.1.9 Yes
Application progress moveit_transfer < 2023.0.6 Yes
References