This vulnerability exists on the binary of filesystem location that can allow threat actors to escalate privileges by abusing the plugin.

The New York City Department of Education (NYC DOE) says hackers stole documents containing the sensitive personal information of up to 45,000 students from its MOVEit Transfer server.