Vulnerabilities Similar to CVE-2023-34362 Identified

Progress disclosed newly discovered SQL injection vulnerabilities in MOVEit Transfer and MOVEit Cloud that can allow unauthorized modification or disclosure of MOVEit database content. Progress has not yet assigned a CVE for the newest issue, reported no observed active exploitation for this specific vulnerability, is testing patches (with Cloud clusters already patched), and recommends disabling HTTP/HTTPS to MOVEit and applying available mitigations or patches.