CVE-2020-8612

Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions 2019.1 through 2019.1.3 MOVEit Transfer versions 2019.2 through 2019.2.0

Description The issue is related to a REST API endpoint that failed to properly sanitize malicious input. This could allow an authenticated attacker to execute arbitrary code in a victim's browser. The attack is facilitated through a cross-site scripting (XSS) mechanism.

Recommendations For MOVEit Transfer versions 2019.1 through 2019.1.3, update to version 2019.1.4 or later. For MOVEit Transfer versions 2019.2 through 2019.2.0, update to version 2019.2.1 or later.