Lucene search

K
githubexploit9CFA2579-1C03-5275-A092-7DB9E8630882
HistoryJun 28, 2024 - 5:13 p.m.

Exploit for SQL Injection in Progress Moveit Cloud

2024-06-2817:13:15
51
moveit transfer
unauthenticated
rce
ruby_script
exploitation
vulnerability
attackerkb_analysis
target_ip
session_token
initial_session
sysadmin_account
api_access_token
folderid_leakage
org_key_leakage
deserialization_gadget
encryption_with_org_key

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

Low

0.969 High

EPSS

Percentile

99.7%

CVE-2023-34362: MOVEit Transfer Unauthenticated RCE

For a ful…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

Low

0.969 High

EPSS

Percentile

99.7%