Critical Vulnerability Exploited in MOVEit Transfer App

By

All versions of the app are affected; patch now.

Attackers are targeting a newly disclosed critical vulnerability in the MOVEit Transfer web application that can provide remote code execution on vulnerable systems, reports Dennis Fisher.

According to researchers, the file-transfer vulnerability (CVE-2023-34362) is not simply a SQL injection bug but can also lead to remote code execution, Fisher says.

All versions of MOVEit Transfer are affected, and patched versions have been released to address the vulnerability.

Read more at Decipher.
 
 

 
 

06/21/2023
patching , Security

Related content

comments powered by Disqus