Lucene search

K
cvelistRapid7CVELIST:CVE-2023-0669
HistoryFeb 06, 2023 - 7:16 p.m.

CVE-2023-0669 Fortra GoAnywhere MFT License Response Servlet Command Injection

2023-02-0619:16:19
CWE-502
rapid7
raw.githubusercontent.com
1

6.9 Medium

AI Score

Confidence

Low

0.97 High

EPSS

Percentile

99.7%

Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.