?? ????? ??????? ?????? ???? ???? ????? Progress Software ?? ??? ? ????? ?? ?????????? ??? ????? SQL ?? MOVEit Transfer? ????????? ?????? ?? ???? ?????? ??? ???? ??????? ??????? ??? ???? ???. ????? ?? ???? Progress Software ?? ?????????? ?? ??? ???? ???? ?? ??? ????? ???? ???.
?????????? ????? SQL ??????? ???? ?? ????? CVE-2023-36934? ?? ??? ?????? ???????? ?? ??????? ????? ???? ???? ????? ?????? ??????? ?? ??????????? MOVEit Transfer ?? ???? [?].
?????????????? ????? SQL ?? ??? ?????? ?????? ??? ? ?????? ????? ?? ?? ??????? ????? ??????? ?? ?????????????? ?? ???????? ???? ? ?? ??? ?? ?? ????????? ???? ????. ??????? ????????? payload??? ??????? ???????? ??? ?? ?? endpoint??? ???? ?? ?????? ????????? ????? ???? ?? ???????? ???????? ???? ?? ??????????? ?? ????? ???? ?? ???? ???.
???? ??? ???? CVE-2023-36934 ??? ??? ?? ??????? ?? ?? ???? ???? ?? ???? ?? ????? ??????????? ???. ??? ???? ?????? ?? ??? ??????? ???? ?????????? ????? ??? ????????? ?? ??? ?????? ?? ??? ?????????? ??????????? ????. ?????????? ?? ????? ??? ?????? ???? ?? ??????? ??????? ?? ??? ?????????? ??? ???? ??????? ???? ?????? ???.
??? ??? ?? ?? ?? ??? ????? ?????? ???? ???? ???? ?? ?? ?? ?????????? ????? SQL ??????[?] (CVE-2023-34362) ???? ??? ???????? MOVEit Transfer ?? ????????? Clop ??????? ?????[?]. ??? ????? ???? ?? ???? ??????? ? ????? ??? ?? ?????????? ????????? ??.
????? ??????????? ?????? Progress Software ?? ?????????? ?? ??? ???? ???? ?? ??? ????? ??????: CVE-2023-36932 ? CVE-2023-36933.
CVE-2023-36932 ?? ??? ????? SQL ??? ?? ???????? ???? ???????? ?? ???? ????? ??????? ???? ?????? ??????? ?? ??????????? MOVEit Transfer ???? ??????????? ???? ????. ?? ??? ????? CVE-2023-36933? ?????????? ??? ?? ?? ??????? ????? ?????? ?????? MOVEit Transfer ?? ?? ??? ????????? ????? ????.
?????? HackerOne ? Trend Micro’s Zero Day Initiative ?? ??? ???????? Progress Software ?? ?? ???? ??? ????????????? ???? ?????.
??? ????????????? ?? ????? ???? MOVEit Transfer? ?? ???? ??????? ? ???????? ????? ?????? ? ????????? ?????? ? ????????? ?????? ? ??????? ?????? ? ????????? ? ?????? ? ???????? ????? ?????????.
Progress Software ??????????????? ???? ?? ???? ???? ???????? ???? MOVEit Transfer ?? ????? ???? ???? ???. ?????? ?? ??????? ????? ?????? ???? ???? ????? ???? ?? ??? ?????????????? ?? ????? ???? MOVEit Transfer ??????????? ????.
?????
[?] https://community.progress.com/s/article/MOVEit-Transfer-2020-1-Service-Pack-July-2023
[?] https://thehackernews.com/2023/06/moveit-transfer-under-attack-zero-day.html
[?] https://thehackernews.com/2023/06/third-flaw-uncovered-in-moveit-transfer.html
[?] https://thehackernews.com/2023/07/another-critical-unauthenticated-sqli.html
??????? :
???? ??????
???? :
????????? ???? ??????? ????? ???? ????
