CVE-2023-34362 – MOVEit Transfer Zero-Day SQL Injection Vulnerability Actively Exploited in the Wild

Progress Software has recently (May 31st, 2023) released a security advisory regarding a critical zero-day vulnerability affecting ALL VERSIONS of the company’s MOVEit product which is being actively exploited in the wild in order to exfiltrate data from targeted environments. The vulnerability has been already added to the CISA KEV (known exploited vulnerabilities) catalog.  Note: ... CVE-2023-34362 – MOVEit Transfer Zero-Day SQL Injection Vulnerability Actively Exploited in the Wild

The post CVE-2023-34362 – MOVEit Transfer Zero-Day SQL Injection Vulnerability Actively …

actively exploited advisory critical cve cve-2023-34362 data environments exfiltrate data exploited injection may moveit moveit transfer moveit transfer zero day order product progress progress software rezilion research security security advisory software sql sql injection the company vulnerabilities vulnerability vulnerability management zero-day zero-day vulnerability