| Package | Affected versions | Patched versions |
|---|---|---|
| moveit dmz | = 8.2= 8.3≤ 8.1 | |
| moveit transfer 2017 | = 9.0 |
Ipswitch MOVEit Transfer (formerly DMZ) allows pre-authentication blind SQL injection. The fixed versions are MOVEit Transfer 2017 9.0.0.201, MOVEit DMZ 8.3.0.30, and MOVEit DMZ 8.2.0.20.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free