PT-2025-47528

CVE-2025-13147

·

Published

2025-11-15

·

Updated

2025-11-21

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Progress MOVEit Transfer versions prior to 2024.1.8 Progress MOVEit Transfer versions 2025.0.0 through 2025.0.3
Description A Server-Side Request Forgery (SSRF) vulnerability exists in Progress MOVEit Transfer. This type of issue allows an attacker to make requests on behalf of the server, potentially accessing internal resources or performing actions with the server's privileges.
Recommendations Update Progress MOVEit Transfer to version 2024.1.8 or later. Update Progress MOVEit Transfer to version 2025.0.4 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾