← Database

CVE-2023-0669

HIGH CVSS: 7.2 Published: 2023-02-06 Modified: 2026-08-06

Description

Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

Affected Platforms

Fortra Goanywhere Managed File Transfer

Weakness Type

CWE-502, CWE-502

References