{"basis":"claimed","id":"CVE-2023-36934","name":"CVE-2023-36934","vendorProject":null,"product":null,"publishedAt":"2023-07-05","cvss":null,"exploited":null,"epss":{"score":0.95184,"percentile":0.99864,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"no_history","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"no_history","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2026-01-20","daysToRule":930},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}},"title":null,"description":"In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to the MOVEit Transfer database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint that could result in modification and disclosure of MOVEit database content.","cwes":[],"vendors":[{"vendor":"cloudflare","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"aws","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"azure","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"google","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"fastly","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"f5","status":"rule","basis":"claimed","firstOn":"2026-01-20","firstIsNew":true,"daysToRule":930,"daysAtMost":null,"freePlan":false,"claims":[{"id":"a18b5e629333b4fddbeac1d66855dfb415e687b3a7972197f04f567dddf8f200","cve_id":"CVE-2023-36934","vendor":"f5","product":"Attack signatures","rule_id":"200102198","rule_name":"MOVEit Transfer SQL Injection","change":"new","default_action":null,"published_on":"2026-01-20","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200102198 \"MOVEit Transfer SQL Injection\" (SQL-Injection, risk High), systems: Other Web Server. References: CVE-2023-36934.","first_seen_at":"2026-11-02T21:00:25.080Z"}]},{"vendor":"akamai","status":"no_source","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"crs","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]}],"updatedAt":"2026-11-02T21:15:26.211Z","cvssVector":null,"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total"},"measured":[{"engineId":"owasp-crs","engineName":"OWASP Core Rule Set","engineVersion":"4.25.0","runtime":"Coraza v3.8.1","config":"paranoia level 1, anomaly threshold 5, default CRS settings","ranAt":"2026-11-02T13:02:57.000Z","verdict":"partial","templateId":"CVE-2023-36934","templatePath":"http/cves/2023/CVE-2023-36934.yaml","requests":4,"blockedRequests":2,"rules":["920340","920640","932370","942100","942350","942540"],"note":"","requestDetail":[{"method":"POST","path":"/human.aspx?…","status":403,"blocked":true,"rules":["932370","942100","942350","942540"]},{"method":"POST","path":"/human.aspx?…","status":200,"blocked":false,"rules":[]},{"method":"POST","path":"/machine.aspx","status":403,"blocked":true,"rules":["920340","920640"]},{"method":"POST","path":"/api/v1/auth/token","status":200,"blocked":false,"rules":[]}]},{"engineId":"owasp-crs","engineName":"OWASP Core Rule Set","engineVersion":"4.25.0","runtime":"Coraza v3.8.1","config":"paranoia level 2, anomaly threshold 5, default CRS settings","ranAt":"2026-11-02T13:03:28.000Z","verdict":"partial","templateId":"CVE-2023-36934","templatePath":"http/cves/2023/CVE-2023-36934.yaml","requests":4,"blockedRequests":2,"rules":["920340","920640","932370","941330","941340","942100","942150","942180","942200","942210","942260","942300","942350","942370","942380","942410","942430","942480","942540"],"note":"","requestDetail":[{"method":"POST","path":"/human.aspx?…","status":403,"blocked":true,"rules":["932370","941330","941340","942100","942150","942180"]},{"method":"POST","path":"/human.aspx?…","status":200,"blocked":false,"rules":[]},{"method":"POST","path":"/machine.aspx","status":403,"blocked":true,"rules":["920340","920640"]},{"method":"POST","path":"/api/v1/auth/token","status":200,"blocked":false,"rules":[]}]}],"social":{"total":0,"first_seen":null,"daily":[{"day":"2026-10-21","posts":0},{"day":"2026-10-22","posts":0},{"day":"2026-10-23","posts":0},{"day":"2026-10-24","posts":0},{"day":"2026-10-25","posts":0},{"day":"2026-10-26","posts":0},{"day":"2026-10-27","posts":0},{"day":"2026-10-28","posts":0},{"day":"2026-10-29","posts":0},{"day":"2026-10-30","posts":0},{"day":"2026-10-31","posts":0},{"day":"2026-11-01","posts":0},{"day":"2026-11-02","posts":0},{"day":"2026-11-03","posts":0}],"top_posts":[],"exploit_repositories":[]}}