CVE-2025-10932: AS2 module allows uncontrolled file uploads
Uncontrolled Resource Consumption vulnerability in Progress MOVEit Transfer (AS2 module).This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.3, from 2024.1.0 before 2024.1.7, from 2023.1.0 before 2023.1.16.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10932?
CVE-2025-10932 is classified as a high severity vulnerability due to its potential for uncontrolled resource consumption.
How do I fix CVE-2025-10932?
To remediate CVE-2025-10932, upgrade your Progress MOVEit Transfer software to version 2025.0.3 or later, 2024.1.7 or later, or 2023.1.16 or later.
What systems are affected by CVE-2025-10932?
CVE-2025-10932 affects Progress MOVEit Transfer versions 2025.0.0 to 2025.0.2, 2024.1.0 to 2024.1.6, and 2023.1.0 to 2023.1.15.
Can CVE-2025-10932 lead to denial of service?
Yes, CVE-2025-10932 can lead to denial of service due to unrestricted resource consumption.
Is there a workaround for CVE-2025-10932?
No official workaround is provided for CVE-2025-10932; upgrading to a patched version is the recommended approach.