Exploit for Deserialization of Untrusted Data in Fortra Goanywhere_Managed_File_Transfer

🗓️ 10 Feb 2023 13:02:55Reported by 0xf4n9xType

Pre-authentication deserialization exploit in GoAnywhere License Response Servlet allows remote command execution via attacker-controlled object.

Reporter	Title	Published	Views	Family All 57
0day.today	Fortra GoAnywhere MFT Unsafe Deserialization Remote Code Execution Exploit	13 Feb 202300:00	–	zdt
0day.today	Goanywhere Encryption helper 7.1.1 - Remote Code Execution Exploit	8 Apr 202300:00	–	zdt
GithubExploit	Exploit for Deserialization of Untrusted Data in Fortra Goanywhere_Managed_File_Transfer	26 Feb 202302:33	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Fortra Goanywhere_Managed_File_Transfer	26 Feb 202302:33	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Fortra Goanywhere_Managed_File_Transfer	6 Apr 202303:40	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Fortra Goanywhere_Managed_File_Transfer	24 Dec 202513:22	–	githubexploit
ICS	#StopRansomware: CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability	7 Jun 202312:00	–	ics
ICS	Understanding Ransomware Threat Actors: LockBit	14 Jun 202312:00	–	ics
ICS	North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs	25 Jul 202412:00	–	ics
ATTACKERKB	CVE-2023-0669	6 Feb 202300:00	–	attackerkb

11 Sep 2025 02:16Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.2

EPSS0.94378