CVE

CVE-2023-0669

P1⬤ KNOWN RANSOMWARE USE

Fortra GoAnywhere MFT Remote Code Execution Vulnerability

Fortra · GoAnywhere MFT

Date added (CISA)

2023-02-10

Remediation due

2023-03-03

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet due to deserializing an attacker-controlled object.

Source: NVD ↗ · CISA KEV Catalog ↗