CVE-2023-0669

Severity

critical · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2023-02-10

Reference

https://nvd.nist.gov/vuln/detail/CVE-2023-0669

⚡ RCE ◐ zero-day ⌖ exploited in the wild shame 95/100 ransomwarerceexploited-in-wildzero-day

Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet due to deserializing an attacker-controlled object.

Players implicated

Fortra · vendor GoAnywhere MFT · product

Description

Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet due to deserializing an attacker-controlled object.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.