CVE-2024-11922

🗓️ 28 Apr 2025 20:57:37Reported by FortraType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 62 Views

Missing input validation in Fortra's GoAnywhere Web Client allows HTML or JavaScript injection.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2024-11922	28 Apr 202521:11	–	circl
CNNVD	Fortra GoAnywhere 安全漏洞	28 Apr 202500:00	–	cnnvd
Cvelist	CVE-2024-11922 Input Validation vulnerability in Web Client emails that do not go through Secure Mail	28 Apr 202520:57	–	cvelist
EUVD	EUVD-2025-14217	3 Oct 202520:07	–	euvd
NVD	CVE-2024-11922	28 Apr 202521:15	–	nvd
Positive Technologies	PT-2025-18116 · Fortra · Goanywhere	28 Apr 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-11922	30 Apr 202521:12	–	redhatcve
Vulnrichment	CVE-2024-11922 Input Validation vulnerability in Web Client emails that do not go through Secure Mail	28 Apr 202520:57	–	vulnrichment

NVD

Node

fortra goanywhere_managed_file_transferRange<7.8.0

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "Linux",
      "64 bit",
      "iSeries",
      "IBM System P",
      "IBM z (Mainframe)",
      "UNIX"
    ],
    "product": "GoAnywhere MFT",
    "vendor": "Fortra",
    "versions": [
      {
        "lessThanOrEqual": "7.7.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]