MOVEit Vulnerability: What You Should Know

MOVEit Transfer is a managed file transfer (MFT) application. Organizations host it to allow controlled sharing of files, typically with external partners and other organizations outside their own network boundary. Because file sharing is a near-universal business need, MOVEit Transfer is used broadly across many industries.

The core vulnerability affecting MOVEit Transfer is SQL injection (SQLi). An unauthenticated attacker — someone with no valid credentials on the system — can send a crafted SQL request to the application. From that injection point, the attacker can pivot to arbitrary code execution, effectively gaining the ability to do anything within that system: read, modify, or exfiltrate any files hosted on the server, and execute further commands.

In short: this is a web application vulnerability (SQL injection) that is leveraged to achieve full code execution on the underlying host running the software.