Lucene search
Goanywhere MFT Security Vulnerabilities
cve
A path traversal vulnerability exists in GoAnywhere MFT prior to 7.4.2 which allows attackers to circumvent endpoint-specific permission checks in the GoAnywhere Admin and Web...
6.5CVSS
7.3AI Score
0.0004EPSS
2024-03-14 02:15 PM
33
cve
Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration...
9.8CVSS
7.3AI Score
0.501EPSS
2024-01-22 06:15 PM
73
cve
Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version...