CVE-2025-11235 MOVEit Transfer REST API does not require current password in order to initiate the password change process

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "REST API"
    ],
    "platforms": [
      "Windows"
    ],
    "product": "MOVEit Transfer",
    "vendor": "Progress",
    "versions": [
      {
        "lessThan": "2023.1.3",
        "status": "affected",
        "version": "2023.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "2023.0.8",
        "status": "affected",
        "version": "2023.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "2022.1.11",
        "status": "affected",
        "version": "2022.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "2022.0.10",
        "status": "affected",
        "version": "2022.0.0",
        "versionType": "semver"
      }
    ]
  }
]