coldbraid

CVE-2023-0669 Fortra GoAnywhere MFT

Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet due to deserializing an attacker-controlled object.

CVSS
not scored

CWE-502

On CISA’s exploited list

Fortra GoAnywhere MFT Remote Code Execution Vulnerability

Added
2023-02-10
Federal patch deadline
2023-03-03
Ransomware use
known