VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Sep 20, 2023· Updated Jun 17, 2026

CVE-2023-42656

CVE-2023-42656

Description

In Progress MOVEit Transfer versions released before 2021.1.8 (13.1.8), 2022.0.8 (14.0.8), 2022.1.9 (14.1.9), 2023.0.6 (15.0.6), a reflected cross-site scripting (XSS) vulnerability has been identified in MOVEit Transfer's web interface.  An attacker could craft a malicious payload targeting MOVEit Transfer users during the package composition procedure.  If a MOVEit user interacts with the crafted payload, the attacker would be able to execute malicious JavaScript within the context of the victims browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Progress (organisation)/Moveit Transfer3 versions
    cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*range: <2021.1.8
    • (no CPE)range: <2021.1.8, <2022.0.8, <2022.1.9, <2023.0.6
    • (no CPE)range: 2023.0.0 (15.0.0)
  • Progress (organisation)/MOVEitllm-create
    Range: <2021.1.8, <2022.0.8, <2022.1.9, <2023.0.6

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.