Description
Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.
Remediation
References
Related Vulnerabilities
MongoDb Improper Certificate Validation Vulnerability (CVE-2023-1409)
MySQL CVE-2020-2765 Vulnerability (CVE-2020-2765)
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.21)
WordPress Plugin Events Manager 'events-manager.php' SQL Injection (2.1)
MediaWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2023-45364)