CVE-2023-34362
CVE-2023-34362
In short
MOVEit Transfer has a SQL injection flaw that lets attackers without login credentials access and manipulate the database. This is a critical issue because attackers can steal sensitive data or destroy information stored in the system.
Technical detail
Unauthenticated SQL injection vulnerability in MOVEit Transfer web application allows attackers to execute arbitrary SQL queries against the backend database (MySQL, MSSQL, or Azure SQL) via HTTP/HTTPS requests. Attackers can enumerate database structure, extract sensitive information, or modify/delete database contents; exploitation has been observed in production environments since May 2023.
Summary generated and translated by AI from the official description.
In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1), a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database, and execute SQL statements that alter or delete database elements. NOTE: this is exploited in the wild in May and June 2023; exploitation of unpatched systems can occur via HTTP or HTTPS. All versions (e.g., 2020.0 and 2019x) before the five explicitly mentioned versions are affected, including older unsupported versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/apublic PoCs found — 16
githubgithub.com/horizon3ai/CVE-2023-34362★ 138githubgithub.com/sfewer-r7/CVE-2023-34362★ 64githubgithub.com/Malwareman007/CVE-2023-34362★ 10githubgithub.com/kenbuckler/MOVEit-CVE-2023-34362★ 6githubgithub.com/errorfiathck/MOVEit-Exploit★ 2githubgithub.com/deepinstinct/MOVEit_CVE-2023-34362_IOCs★ 2githubgithub.com/horrister/moveit-transfer-cve-2023-34362★ 1githubgithub.com/toorandom/moveit-payload-decrypt-CVE-2023-34362★ 1githubgithub.com/KarmanyaT28/Multi-Stage-Exploitation-and-Detection-Engineering-Analysis-of-CVE-2023-34362-in-MOVEit-Transfer★ 0githubgithub.com/glen-pearson/MoveIT-CVE-2023-34362-RCE★ 0githubgithub.com/aditibv/MOVEit-CVE-2023-34362★ 0githubgithub.com/Naveenbana5250/CVE-2023-34362-Defense-Package★ 0githubgithub.com/khengar9274-web/moveit-transfer-2023-breach★ 0githubgithub.com/tubaaiftikhar-ui/MOVEit-Transfer-Data-Breach-Analysis.★ 0cve_referencepacketstormsecurity.com/files/172883/MOVEit-Transfer-SQL-Injection-Remote-Code-Execution.htmlunverifiedcve_referencepacketstormsecurity.com/files/173110/MOVEit-SQL-Injection.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://packetstormsecurity.com/files/172883/MOVEit-Transfer-SQL-Injection-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/173110/MOVEit-SQL-Injection.htmlhttps://community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-31May2023https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-34362