CVE-2023-0669

Warnung

Exploit

EPSS 94.38%
Veröffentlicht 06.02.2023 20:15:14
Zuletzt bearbeitet 03.11.2025 15:06:12
Quelle cve@rapid7.com
CVE-Watchlists
Login
Unerledigt
Login

Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

Betroffene Produkte Warnungen 1 Metriken 3 CWE 1 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Fortra ≫ Goanywhere Managed File Transfer Version < 7.1.2

10.02.2023: CISA Known Exploited Vulnerabilities (KEV) Catalog

Fortra GoAnywhere MFT Remote Code Execution Vulnerability

Schwachstelle

Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet due to deserializing an attacker-controlled object.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	94.38%	1

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.2	1.2	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.2	1.2	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H