NetSight
high7.5

CVE-2023-36933

In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), it is possible for an att…

Impact

In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), it is possible for an attacker to invoke a method that results in an unhandled exception. Triggering this workflow can cause the MOVEit Transfer application to terminate unexpectedly.

Affected products

VendorProductAffected versions
ProgressMoveit Transfer
before 2020.1.11
from 2021.0 before 2021.0.9
from 2021.1.0 before 2021.1.7
from 2022.0.0 before 2022.0.7
from 2022.1.0 before 2022.1.8
from 2023.0.0 before 2023.0.4

Weakness classification

References