Progress · MOVEit Transfer
CVE-2023-34362
Progress MOVEit Transfer SQL Injection Vulnerability
这是什么
In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1), a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database, and execute SQL statements that alter or delete database elements. NOTE: this is exploited in the wild in May and June 2023; exploitation of unpatched systems can occur via HTTP or HTTPS. All versions (e.g., 2020.0 and 2019x) before the five explicitly mentioned versions are affected, including older unsupported versions.
CISA: Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database in addition to executing SQL statements that alter or delete database elements.
该怎么做
Apply updates per vendor instructions.
美国联邦机构的修复期限：2023年6月23日
Progress 的其他被利用漏洞
| 加入日期 | 漏洞 | 产品 | 严重程度 | 受攻击概率 |
|---|---|---|---|---|
| 2026年8月7日 | Command Injection | LoadMaster | 严重 9.6 | 99.8% |
| 2025年3月3日 | Path Traversal | WhatsUp Gold | 严重 9.8 | 99.3% |
| 2024年11月18日 | OS Command Injection | Kemp LoadMaster | 严重 10.0 | 95% |
| 2024年9月16日 | SQL Injection | WhatsUp Gold | 严重 9.8 | 93% |
| 2024年6月13日 | Authentication Bypass by Spoofing | Telerik Report Server | 严重 9.8 | 97% |
| 2023年10月5日 | Deserialization of Untrusted Data | WS_FTP Server | 严重 10.0 | 90% |
| 2021年11月3日 | Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness | ASP.NET AJAX and Sitefinity | 严重 9.8 | 75% |
| 2021年11月3日 | Deserialization of Untrusted Data | Telerik UI for ASP.NET AJAX | 严重 9.8 | 99.7% |
来源：Known Exploited Vulnerabilities（CISA，公有领域）、CVE records（cve.org）和 EPSS（FIRST）。受攻击概率是 EPSS 对未来 30 天内有人尝试利用该漏洞的估计。