Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, a REST API endpoint failed to adequately sanitize malicious input, which could allow an authenticated attacker to execute arbitrary code in a victim's browser, aka XSS.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Progress Software MOVEit Transfer 跨站脚本漏洞
Vulnerability Description
Progress Software MOVEit Transfer是美国Progress Software公司的一套文件传输软件。 Progress Software MOVEit Transfer 2019.1.4之前的2019.1版本和2019.2.1之前的2019.2版本中存在跨站脚本漏洞，该漏洞源于REST API端点没有充分地清理恶意输入。攻击者可利用该漏洞在用户浏览器中执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A