CVE-2023-36934

CRITICALNuclei

Progress MOVEit Transfer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2023-36934 has a selected CVSS score of 9.1 (critical); EIP currently links 1 Nuclei template.

Description

In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to the MOVEit Transfer database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint that could result in modification and disclosure of MOVEit database content.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Dec 4, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 21, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

MOVEit Transfer

Browse Progress / MOVEit Transfer
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALMOVEit Transfer - SQL InjectionCVSS 9.1

In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to the MOVEit Transfer database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint that could result in modification and disclosure of MOVEit database content.

Impact

Successful exploitation of this vulnerability can lead to unauthorized access to sensitive data, modification of data, or even complete compromise of the application and underlying systems.

Remediation

Apply the latest security patches or updates provided by the vendor to fix the SQL Injection vulnerability in the MOVEit Transfer application.

WeaknessesCWE-89
Authorsrootxharsh, iamnoooob, pdresearch
Template tagscvecve2023moveitrcesqliintrusiveprogressvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CPE: cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*
Shodan: http.favicon.hash:989289239
FOFA: icon_hash=989289239
https://community.progress.com/s/article/MOVEit-Transfer-2020-1-Service-Pack-July-2023 https://blog.projectdiscovery.io/moveit-transfer-sql-injection/ https://thehackernews.com/2023/07/another-critical-unauthenticated-sqli.html https://www.progress.com/moveit https://github.com/KushGuptaRH/MOVEit-Response

Source: ProjectDiscovery

References

3