Ransomwarecritical

Another Critical Unauthenticated SQLi Flaw Discovered in MOVEit Transfer Software

The Hacker Newsby @TheHackersNewsJul 7, 2023 · 14:01 UTC (Jul 7, 2023)2 min read2 · 2 reads

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-36934 CVE-2023-34362 CVE-2023-36932 CVE-2023-36933

Tags: cve-2023-36934 cve-2023-34362 cve-2023-36932 cve-2023-36933 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-34362	Unauthenticated SQL Injection in Progress MOVEit Transfer	9.8	100%	KEVRansomwarePoC	Jun 2, 2023 KEV Jun 2, 2023
CVE-2023-36934 +2 related CVEs CVE-2023-36932 CVE-2023-36933	In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), a…	9.1 group max	95%		Jul 5, 2023

From the original article

2 min read at thehackernews.com

 Swati Khandelwal  Jul 07, 2023 Vulnerability / Cyber Threat Progress Software has announced the discovery and patching of a critical SQL injection vulnerability in MOVEit Transfer, popular software used for secure file transfer. In addition, Progress Software has patched two other high-severity vulnerabilities.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.