VulnerabilityALERT Critical

CVE-2023-34362: MOVEit Transfer SQL injection vulnerability

Known exploited MOVEit Transfer SQL injection vulnerability associated with data theft campaigns.

Exploitation can expose sensitive managed file transfer data and may require incident response beyond patching.

Patch immediately, follow vendor IR guidance, review file transfer logs, rotate credentials, and notify impacted data owners.

Published: 6/2/2023, 12:00:00 PMSource: Makriva Vulnerability SeedTags: CVE-2023-34362, MOVEit, SQL Injection, Data Exfiltration, CISA KEV