Third Flaw Uncovered in MOVEit Transfer App Amidst Cl0p Ransomware Mass Attack

Progress Software on Thursday disclosed a third vulnerability impacting its MOVEit Transfer application, as the Cl0p cybercrime gang deployed extortion tactics against affected companies.
The new flaw, which is being tracked as CVE-2023-35708, also concerns an SQL injection vulnerability that "could lead to escalated privileges and potential unauthorized access to the environment."
The company

app application attack cl0p cl0p ransomware companies cve cve-2023-35708 cybercrime extortion flaw injection moveit moveit transfer privileges progress progress software ransomware software sql sql injection tactics third transfer vulnerability