Input validation

2024-01-1716:15:00

PRIOn knowledge base

www.prio-n.com

in progress

moveit transfer

input validation

authenticated user

https

computational errors

denial of service

nvd

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.6%

JSON

In Progress MOVEit Transfer versions released before 2022.0.10 (14.0.10), 2022.1.11 (14.1.11), 2023.0.8 (15.0.8), 2023.1.3 (15.1.3), an input validation issue was discovered. An authenticated user can manipulate a parameter in an HTTPS transaction. The modified transaction could lead to computational errors within MOVEit Transfer and potentially result in a denial of service.

CPENameOperatorVersion
moveit_transferge2023.1.0
moveit_transferlt2023.1.3
moveit_transferge2023.0.1
moveit_transferlt2023.0.8
moveit_transferlt2022.0.10
moveit_transferge2022.1.0
moveit_transferlt2022.1.11

Name	Operator	Version
moveit_transfer	ge	2023.1.0
moveit_transfer	lt	2023.1.3
moveit_transfer	ge	2023.0.1
moveit_transfer	lt	2023.0.8
moveit_transfer	lt	2022.0.10
moveit_transfer	ge	2022.1.0
moveit_transfer	lt	2022.1.11