CVE-2023-36933
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
In MOVEit Transfer before version 2021.0.9, 2021.1.7, 2022.0.7, 2022.1.8, and 2023.0.4, it is possible for an attacker to invoke a method that results in an unhandled exception. Triggering this workflow can cause the MOVEit Transfer application to terminate unexpectedly.
Risk Assessment
An attacker could exploit this vulnerability to disrupt the application's operation, potentially leading to service outages and financial losses.
Recommendation
It is recommended to update MOVEit Transfer to the latest version to mitigate this vulnerability and ensure application stability.
Original NVD description (English source)
In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), it is possible for an attacker to invoke a method that results in an unhandled exception. Triggering this workflow can cause the MOVEit Transfer application to terminate unexpectedly.