Fortra GoAnywhere MFT CVE-2023-0669 Code Injection Vulnerability

Description

Fortra GoAnywhere MFT has a pre-authentication command injection flaw in the License Response Servlet caused by deserializing attacker-controlled objects, allowing arbitrary command execution.

Outbreak Alert

Fortra (formerly, knowns as HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet.

View the full Outbreak Alert Report

Affected Applications

GoAnywhere MFT

References