Vulnerabilities CVE-2023-0669

CVE-2023-0669

Medium

Open

KEV

TLP:CLEAR

Fortra GoAnywhere MFT License Response Servlet Command Injection

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

Details

EPSS Score ⓘ: 100.00%

100th percentile
Confidence: 100%
Published: Feb 6, 2023
Last Modified: Aug 6, 2026
CISA KEV
Date Added: Feb 10, 2023
Patch Due: Mar 3, 2023
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.