CVE-2023-34362: MOVEit Transfer SQL Injection
What was the MOVEit Transfer vulnerability?
A critical SQL injection vulnerability in MOVEit Transfer web application. Unauthenticated attackers can send crafted payloads to the MOVEit Transfer application endpoint to gain access to the database and execute arbitrary code.
Impact & Exploitation
Exploited by Cl0p ransomware group in a mass-exploitation campaign affecting 2,000+ organizations and 60+ million individuals including government agencies, banks, and healthcare providers.
How Precogs AI Detects MOVEit Transfer SQL Injection
Precogs AI identifies SQL injection patterns in compiled web applications and detects MOVEit-style exploitation vectors through Binary DAST runtime testing.