In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), it is possible for an attacker to invoke a method that results in an unhandled exception. Triggering this workflow can cause the MOVEit Transfer application to terminate unexpectedly.
| Software | From | Fixed in |
|---|---|---|
| progress / moveit_transfer | - | 2020.1.11 |
| progress / moveit_transfer | 2023.0.0 | 2023.0.4 |
| progress / moveit_transfer | 2022.1.0 | 2022.1.8 |
| progress / moveit_transfer | 2022.0.0 | 2022.0.7 |
| progress / moveit_transfer | 2021.1.0 | 2021.1.7 |
| progress / moveit_transfer | 2021.0 | 2021.0.9 |