CVE-2023-34362 – MOVEit SQL Injection

A SQL injection vulnerability has been identified in Progress MOVEit Transfer. This vulnerability has the potential to enable unauthorized access to the database by an unauthenticated attacker. The severity of the breach varies based on the specific database engine being utilized (such as MySQL, Microsoft SQL Server, or Azure SQL). Exploiting this vulnerability could lead to the exposure of sensitive database information, as well as the execution of SQL commands that modify or remove elements within the database.

Information on mitigations and workaround have been made available by Progress on the reference below: