Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubexploitE7CD52DA-0A25-5F9A-959E-BD474E2726E2
HistoryFeb 10, 2023 - 1:02 p.m.

Exploit for Deserialization of Untrusted Data in Fortra Goanywhere Managed File Transfer

2023-02-1013:02:55
429
goanywhere mft
command injection
license response
pre-authentication
arbitrary object
cve-2023-0669
ysoserial
java version
encrypt
payload.

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.971

Percentile

99.8%

JSON

CVE-2023-0669

> GoAnywhere MFT suffers from a pre-authenticati…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

Related

nessus 1
malwarebytes 3
packetstorm 2
rapid7blog 4
cisa_kev 1
attackerkb 1
thn 6
metasploit 1
githubexploit 5
hivepro 1
prion 1
github 1
osv 1
qualysblog 3
zdt 2
cvelist 1
nvd 1
talosblog 3
nuclei 1
cve 1
exploitdb 1
impervablog 1
ics 3
nessus
nessus
Fortra GoAnywhere Managed File Transfer (MFT) < 7.1.2 Pre-Authentication Command Injection (CVE-2023-0669)
2023-02-22 00:00:00
malwarebytes
malwarebytes
Clop ransomware is victimizing GoAnywhere MFT customers
2023-03-14 04:00:00
GoAnywhere zero-day opened door to Clop ransomware
2023-02-20 02:00:00
Rubrik is latest victim of the Clop ransomware zero-day campaign
2023-03-17 16:30:00
packetstorm
packetstorm
Fortra GoAnywhere MFT Unsafe Deserialization Remote Code Execution
2023-02-09 00:00:00
Goanywhere Encryption Helper 7.1.1 Remote Code Execution
2023-04-10 00:00:00
rapid7blog
rapid7blog
Exploitation of GoAnywhere MFT zero-day vulnerability
2023-02-03 16:18:21
CVE-2024-0204: Critical Authentication Bypass in Fortra GoAnywhere MFT
2024-01-23 18:42:31
Metasploit Weekly Wrap-Up
2023-02-10 19:39:42
cisa_kev
cisa_kev
Fortra GoAnywhere MFT Remote Code Execution Vulnerability
2023-02-10 00:00:00
attackerkb
attackerkb
CVE-2023-0669
2023-02-06 00:00:00
thn
thn
Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks
2023-04-20 11:22:00
New Frontiers, Old Tactics: Chinese Espionage Group Targets Africa & Caribbean Govts
2024-05-23 13:50:00
Patch Your GoAnywhere MFT Immediately - Critical Flaw Lets Anyone Be Admin
2024-01-24 05:32:00
metasploit
metasploit
Fortra GoAnywhere MFT Unsafe Deserialization RCE
2023-02-08 15:24:27
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Fortra Goanywhere Managed File Transfer
2023-02-26 02:33:54
Exploit for Deserialization of Untrusted Data in Fortra Goanywhere Managed File Transfer
2023-02-26 02:33:54
Exploit for Deserialization of Untrusted Data in Fortra Goanywhere Managed File Transfer
2023-02-21 18:47:42
hivepro
hivepro
Clop Ransomware Group Claims Responsibility for GoAnywhere MFT Attacks
2023-02-13 11:34:45
prion
prion
Command injection
2023-02-06 20:15:00
github
github
Withdrawn: Fortra GoAnywhere MFT Deserialization of Untrusted Data vulnerability affects metasploit-framework
2023-02-06 21:30:29
osv
osv
Fortra GoAnywhere MFT Deserialization of Untrusted Data vulnerability affects metasploit-framework
2023-02-06 21:30:29
qualysblog
qualysblog
Forta GoAnywhere Zero-Day Exploited By Threat Actors
2023-02-15 23:34:54
Qualys Survey of Top 10 Exploited Vulnerabilities in 2023
2023-09-26 13:04:00
2023 Threat Landscape Year in Review: If Everything Is Critical, Nothing Is
2023-12-19 15:00:00
zdt
zdt
Fortra GoAnywhere MFT Unsafe Deserialization Remote Code Execution Exploit
2023-02-13 00:00:00
Goanywhere Encryption helper 7.1.1 - Remote Code Execution Exploit
2023-04-08 00:00:00
cvelist
cvelist
CVE-2023-0669 Fortra GoAnywhere MFT License Response Servlet Command Injection
2023-02-06 19:16:19
nvd
nvd
CVE-2023-0669
2023-02-06 20:15:14
talosblog
talosblog
Threat Source newsletter (Feb. 23, 2023) — Social media sites are making extra security a paid feature
2023-02-23 19:00:45
Incident Response trends Q2 2023: Data theft extortion rises, while healthcare is still most-targeted vertical
2023-07-26 12:00:57
Inside the ransomware playbook: Analyzing attack chains and mapping common TTPs
2024-07-10 10:00:33
nuclei
nuclei
Fortra GoAnywhere MFT - Remote Code Execution
2023-02-10 14:50:32
cve
cve
CVE-2023-0669
2023-02-06 20:15:14
exploitdb
exploitdb
Goanywhere Encryption helper 7.1.1 - Remote Code Execution (RCE)
2023-04-08 00:00:00
impervablog
impervablog
Why Attackers Target the Government Industry
2023-05-09 14:47:17
ics
ics
#StopRansomware: CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability
2023-06-07 12:00:00
Understanding Ransomware Threat Actors: LockBit
2023-06-14 12:00:00
North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
2024-07-25 12:00:00

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.971

Percentile

99.8%

JSON
Related for E7CD52DA-0A25-5F9A-959E-BD474E2726E2
nessus1malwarebytes3packetstorm2rapid7blog4cisa_kev1attackerkb1thn6metasploit1githubexploit5hivepro1prion1github1osv1qualysblog3zdt2cvelist1nvd1talosblog3nuclei1cve1exploitdb1impervablog1ics3