VYPR
← All advisories
High severity7.2NVD Advisory· Published Sep 20, 2023· Updated Jun 17, 2026

CVE-2023-40043

CVE-2023-40043

Description

In Progress MOVEit Transfer versions released before 2021.1.8 (13.1.8), 2022.0.8 (14.0.8), 2022.1.9 (14.1.9), 2023.0.6 (15.0.6), a SQL injection vulnerability has been identified in the MOVEit Transfer web interface that could allow a MOVEit system administrator account to gain unauthorized access to the MOVEit Transfer database. A MOVEit system administrator

could submit a crafted payload to the MOVEit Transfer web interface which could result in modification and disclosure of MOVEit database content.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Progress (organisation)/Moveit Transfercpe-rescue3 versions
    2023.0.0 (15.0.0)+ 2 more
    • (no CPE)range: 2023.0.0 (15.0.0)
    • (no CPE)range: <2021.1.8, <2022.0.8, <2022.1.9, <2023.0.6
    • cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*range: <2021.1.8

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.