| Package | Affected versions | Patched versions |
|---|---|---|
| moveit transfer | ≥ 2022.1.0, < 2022.1.12≥ 2023.0.0, < 2023.0.9≥ 2023.1.0, < 2023.1.4< 2022.0.11 | 2022.1.122023.0.92023.1.42022.0.11 |
In Progress MOVEit Transfer versions released before 2022.0.11 (14.0.11), 2022.1.12 (14.1.12), 2023.0.9 (15.0.9), 2023.1.4 (15.1.4), a logging bypass vulnerability has been discovered. An authenticated user could manipulate a request to bypass the logging mechanism within the web application which results in user activity not being logged properly.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free