vulns.co
/
GKData.io MCP

Back to CVEs

CVE-2023-34362 - MOVEit Transfer SQL Injection

SQL injection enabling access to the database and deployment of a webshell; mass-exploited by Cl0p.

Tags: sqli, moveit, cl0p, mass-exploited

Product
Progress MOVEit Transfer
Severity
critical (CVSS 9.8)
Published / added
2023-05
Signals
CISA KEV

References and evidence