CVE-2023-0669
HIGH
CVSS: 7.2
EPSS: 100.0%
VulnCheck KEV
Weaponized
Ransomware
Metasploit
ExploitDB
CWE-502
CWE-502
T1203
Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.
Published: 2023-02-06