CVE-2025-13147

Medium · 5.3

CVSS

5.3

EPSS

0.3%

Published

Nov 19, 2025

CISA due date

—

The record

Server-Side Request Forgery (SSRF) vulnerability in Progress MOVEit Transfer.This issue affects MOVEit Transfer: before 2024.1.8, from 2025.0.0 before 2025.0.4.

Affected packages

Ecosystem	Package	Introduced	Fixed