CVE-2023-35708

Vulnerability updated 5 months ago (2024-05-04T17:19:08.465Z)
Download STIX
Preview STIX
CVE-2023-35708 is a critical software vulnerability, specifically an SQL injection flaw, that affected the MOVEit Transfer application. This issue was identified as a privilege escalation vulnerability, meaning it could potentially allow unauthorized users to gain elevated access rights within the system. The discovery of this flaw marked the third such vulnerability found in the MOVEit application in less than a month, underlining the need for rigorous security measures and frequent updates. The vulnerability was disclosed on June 15, 2023, by Progress Software Company, the developers of MOVEit. In response to the disclosure, Fidelis Cybersecurity, a leading provider of advanced cybersecurity solutions, swiftly released updates to protect its customers from potential exploitation of the vulnerability. Progress Software also issued patches to fix the SQL injection vulnerability, urging all customers to promptly update their MOVEit Transfer installations. The aftermath of the CVE-2023-35708 disclosure saw the Cl0p hacker group listing victim organizations affected by the vulnerability. The exact impact and number of compromised organizations remain undisclosed. However, the swift response by cybersecurity firms and the patching efforts by Progress Software have mitigated further risks associated with this vulnerability. Future incidents underline the importance of regular software updates and robust cybersecurity practices.
Description last updated: 2024-05-04T17:11:32.103Z
What's your take? (Question 1 of 2)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Moveit
Vulnerability
Clop
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Source Document References
Information about the CVE-2023-35708 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
Unit42
8 months ago
InfoSecurity-magazine
9 months ago
CERT-EU
10 months ago
CERT-EU
10 months ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
Naked Security
a year ago
BankInfoSecurity
a year ago
CERT-EU
a year ago