CVE-2023-0669 Fortra GoAnywhere MFT License Response Servlet Command Injection

🗓️ 06 Feb 2023 19:16:19Reported by rapid7Type

CVE-2023-0669 HelpSystems GoAnywhere MFT Command Injectio

Reporter	Title	Published	Views	Family All 58
0day.today	Fortra GoAnywhere MFT Unsafe Deserialization Remote Code Execution Exploit	13 Feb 202300:00	–	zdt
0day.today	Goanywhere Encryption helper 7.1.1 - Remote Code Execution Exploit	8 Apr 202300:00	–	zdt
GithubExploit	Exploit for Deserialization of Untrusted Data in Fortra Goanywhere_Managed_File_Transfer	26 Feb 202302:33	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Fortra Goanywhere_Managed_File_Transfer	26 Feb 202302:33	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Fortra Goanywhere_Managed_File_Transfer	6 Apr 202303:40	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Fortra Goanywhere_Managed_File_Transfer	24 Dec 202513:22	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Fortra Goanywhere_Managed_File_Transfer	10 Feb 202313:02	–	githubexploit
ICS	#StopRansomware: CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability	7 Jun 202312:00	–	ics
ICS	Understanding Ransomware Threat Actors: LockBit	14 Jun 202312:00	–	ics
ICS	North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs	25 Jul 202412:00	–	ics

[
  {
    "defaultStatus": "unaffected",
    "product": "Goanywhere MFT",
    "vendor": "Fortra",
    "versions": [
      {
        "lessThanOrEqual": "7.1.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
frycos	www.frycos.github.io/vulns4free/2023/02/06/goanywhere-forgotten.html
github	www.github.com/rapid7/metasploit-framework/pull/17607
packetstormsecurity	www.packetstormsecurity.com/files/171789/Goanywhere-Encryption-Helper-7.1.1-Remote-Code-Execution.html
attackerkb	www.attackerkb.com/topics/mg883Nbeva/cve-2023-0669/rapid7-analysis
my	www.my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml
duo	www.duo.com/decipher/fortra-patches-actively-exploited-zero-day-in-goanywhere-mft
rapid7	www.rapid7.com/blog/post/2023/02/03/exploitation-of-goanywhere-mft-zero-day-vulnerability/
infosec	www.infosec.exchange/@briankrebs/109795710941843934

10 Apr 2023 19:06Current

7.2High risk

Vulners AI Score7.2

EPSS0.99999

CWE-502