CVE-2023-35708 2

Vulnerability (CVE)

Active exploitation of the MOVEit Transfer vulnerability — CVE-2023-34362 — by Clop ransomware group

Progress Software issued an advisory on May 31 for CVE-2023-34362, a chain of flaws in internet-facing and on-premises MOVEit Transfer instances that lets an attacker use SQL injection to obtain a sysadmin API token and then call a deserialization function...

Vulnerabilities & Patching

Threat Brief - MOVEit Transfer SQL Injection Vulnerabilities: CVE-2023-34362, CVE-2023-35036 and CVE-2023-35708 (Updated Oct 4)

Cyber Risks Unit 42 Palo Alto Networks

Progress Software alerted customers on May 31 to a critical SQL injection vulnerability, CVE-2023-34362, in its MOVEit Transfer managed file transfer product, followed by additional critical SQLi disclosures CVE-2023-35036 and CVE-2023-35708 on June 9 and...

Vulnerabilities & Patching