Description
Limited authentication bypass by spoofing vulnerability in Progress MOVEit Transfer (HTTPS module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.
Remediation
References
Related Vulnerabilities
Jboss EAP Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2016-4993)
MySQL CVE-2018-3195 Vulnerability (CVE-2018-3195)
WordPress Plugin Translate WordPress-Google Language Translator Cross-Site Scripting (6.0.9)
WordPress Plugin HTML5 Maps Cross-Site Request Forgery (1.6.5.6)
Grafana Incorrect Authorization Vulnerability (CVE-2026-21721)