CVE-2025-2324 A MOVEit Transfer user configured as a Shared Account can gain unintended List permissions on a folder

What is CVE-2025-2324?

CVE-2025-2324 is a medium-severity vulnerability in Progress MOVEit Transfer, published on 19 Mar 2025. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Improper Privilege Management vulnerability for users configured as Shared Accounts in Progress MOVEit Transfer (SFTP module) allows Privilege Escalation.This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.12, from 2024.0.0 before 2024.0.8, from 2024.1.0 before 2024.1.2.

Weakness: CWE-269

Which versions are affected by CVE-2025-2324?

It affects 1 product.

Products include Progress Moveit Transfer.

How do I fix CVE-2025-2324?

No fix has been published for CVE-2025-2324 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-2324 being exploited?

There is no known exploitation of CVE-2025-2324 in the wild and no public exploit code.

Other vulnerabilities in Progress MOVEit Transfer

• CVE-2023-35708 SQL injection in n/a Critical 9.8
• CVE-2021-38159 SQL injection in n/a Critical 9.8
• CVE-2024-5806 MOVEit Transfer Authentication Bypass Vulnerability Critical 9.1
• CVE-2023-36934 SQL injection in n/a Critical 9.1
• CVE-2023-35036 SQL injection in n/a Critical 9.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-r985-fv8x-vqj3.