Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rx22-xr85-fqfw

Опубликовано: 17 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

In Progress MOVEit Transfer versions released before 2022.0.10 (14.0.10), 2022.1.11 (14.1.11), 2023.0.8 (15.0.8), 2023.1.3 (15.1.3), an input validation issue was discovered. An authenticated user can manipulate a parameter in an HTTPS transaction. The modified transaction could lead to computational errors within MOVEit Transfer and potentially result in a denial of service.

In Progress MOVEit Transfer versions released before 2022.0.10 (14.0.10), 2022.1.11 (14.1.11), 2023.0.8 (15.0.8), 2023.1.3 (15.1.3), an input validation issue was discovered. An authenticated user can manipulate a parameter in an HTTPS transaction. The modified transaction could lead to computational errors within MOVEit Transfer and potentially result in a denial of service.

EPSS

Процентиль: 37%
0.00162
Низкий

7.1 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.1
nvd
около 2 лет назад

In Progress MOVEit Transfer versions released before 2022.0.10 (14.0.10), 2022.1.11 (14.1.11), 2023.0.8 (15.0.8), 2023.1.3 (15.1.3), an input validation issue was discovered. An authenticated user can manipulate a parameter in an HTTPS transaction. The modified transaction could lead to computational errors within MOVEit Transfer and potentially result in a denial of service.

CVSS3: 7.1
fstec
около 2 лет назад

Уязвимость компонента HTTPS Transaction Handler программного обеспечения для обработки и передачи конфиденциальных данных Progress MOVEit Transfer, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 37%
0.00162
Низкий

7.1 High

CVSS3

Дефекты

CWE-20