CVE-2023-34362: MOVEit Transfer SQL Injection

CRITICAL
9.8CRITICAL
Published: 2023-05-31Affected: Progress MOVEit Transfer < 2023.0.1CWE-89

What was the MOVEit Transfer vulnerability?

A critical SQL injection vulnerability in MOVEit Transfer web application. Unauthenticated attackers can send crafted payloads to the MOVEit Transfer application endpoint to gain access to the database and execute arbitrary code.

Impact & Exploitation

Exploited by Cl0p ransomware group in a mass-exploitation campaign affecting 2,000+ organizations and 60+ million individuals including government agencies, banks, and healthcare providers.

How Precogs AI Detects MOVEit Transfer SQL Injection

Precogs AI identifies SQL injection patterns in compiled web applications and detects MOVEit-style exploitation vectors through Binary DAST runtime testing.

Precogs Logo

Precogs Research

This vulnerability intelligence report was analyzed and enriched by the Precogs AI Security Team. Our researchers continuously monitor emerging threats across AI code, LLM pipelines, and binary architectures to ensure accurate real-time remediation guidance.