CVE-2023-40043

Summary

CVE-2023-40043 is a SQL injection vulnerability affecting MOVEit Transfer versions prior to 2021.1.8, 2022.0.8, 2022.1.9, and 2023.0.6. This issue, present in the MOVEit Transfer web interface, allows a MOVEit system administrator to submit maliciously crafted input, potentially granting unauthorized access to the MOVEit Transfer database. The vulnerability could result in both modification and disclosure of sensitive MOVEit database content.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.