CVE-2020-28647

In Progress MOVEit Transfer before 2020.1, a malicious user could craft and store a payload within the application

published November 17, 2020

CVSS
—
EPSS
1%
Percentile
73.5
In the wild
Unconfirmed
What it is

In Progress MOVEit Transfer before 2020.1, a malicious user could craft and store a payload within the application. If a victim within the MOVEit Transfer instance interacts with the stored payload, it could invoke and execute arbitrary code within the context of the victim's browser (XSS).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01469 · 73.5th percentile
Published
2020-11-17T13:08Z
EPSS history
Timeline
  • 17 NOV 13:08Z
    In Progress MOVEit Transfer before 2020.1, a malicious user could craft and store a payload within the application
    cvelistv5