But instead of pissing on them... Bravo for enlisting the help of @huntress to do a code review. This vuln is NOT being actively exploited... yet.

https://www.progress.com/security/moveit-transfer-and-moveit-cloud-vulnerability