CVE-2023-35036

CVE-2023-35036 is a significant vulnerability identified in the MOVEit Transfer software, part of the Progress Software suite. This flaw was first reported on June 16, 2023, following the discovery and exploitation of CVE-2023-34362 by a Clop ransomware affiliate. The CVE-2023-35036 vulnerability presents as an SQL injection flaw that can be weaponized to access the application's database content, posing a severe threat to data security. The disclosure of CVE-2023-35036 occurred a week after Progress revealed another set of SQL injection vulnerabilities. This new vulnerability is distinct from CVE-2023-34362, which was previously exploited by the Clop ransomware gang against several high-profile entities including Shell, British Airways, the BBC, and the Nova Scotia government. Despite these separate incidents, both vulnerabilities underscore the persistent security challenges faced by the Progress Software suite. Progress patched the CVE-2023-35036 flaw on May 31st. However, following the patch, a proof-of-concept exploit was developed by security researchers, indicating potential for future breaches. Further vulnerabilities were also discovered subsequent to the patching, reinforcing the critical need for ongoing vigilance and robust security measures in the face of evolving cyber threats.