writeups.xyz / RCE in Progress WS_FTP Ad Hoc via IIS HTTP Modules (CVE-2023-40044)

Submitter : c2a

Date: 1 October 2023

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• RCE
• Security Code Review

Programs :

• Progress (MOVEit Transfer)

Authors :

• Shubham Shah (@Infosec_au)
• Sean Yeoh (@Seanyeoh)

Link :
https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044