CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2023-35708

CVSS 9.8v3.1pub. 2023-06-16upd. 2024-11-21

In Progress MOVEit Transfer before 2021.0.8 (13.0.8), 2021.1.6 (13.1.6), 2022.0.6 (14.0.6), 2022.1.7 (14.1.7), and 2023.0.3 (15.0.3), a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint that could result in modification and disclosure of MOVEit database content. These are fixed versions of the DLL drop-in: 2020.1.10 (12.1.10), 2021.0.8 (13.0.8), 2021.1.6 (13.1.6), 2022.0.6 (14.0.6), 2022.1.7 (14.1.7), and 2023.0.3 (15.0.3).

🇵🇱 Read Polish description →

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Progress Moveit Transfer
APP
Progress
< 2020.1.102021.0.6 – 2021.0.8 (excl.)2021.1.4 – 2021.1.6 (excl.)2022.0.4 – 2022.0.6 (excl.)2022.1.5 – 2022.1.7 (excl.)2023.0.1 – 2023.0.3 (excl.)

🟢