CVE-2023-36934exploração observada

CVE-2023-36934

Publicada em · Atualizada em

Seguir esta CVE

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

62Vexday Risk Score

Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.

ssvc Actepss 95%
da publicação à arma
Publicada no NVD5 de jul.
VulnCheck+152d
In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to the MOVEit Transfer database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint that could result in modification and disclosure of MOVEit database content.
Produtos afetados
n/a · n/a