FAIL › dossier
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events (factory/dossier.py). The failure history and sentiment below are live.
| Date | Event | Sev | Flags | Shame | Summary |
|---|---|---|---|---|---|
| 2023-02-10 | CVE-2023-0669 | critical | ⚡RCE ◐0day ⌖KEV | 95 | Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet due to deserializing an attacker-controlled object. |
| 2025-09-29 | CVE-2025-10035 | critical | ⚡RCE ⌖KEV | 85 | Fortra GoAnywhere MFT suffered a deserialization vulnerability allowing command injection via forged license signatures, linked to ransomware. |
| 2023-03-30 | CVE-2022-42948 | high | ⚡RCE ⌖KEV | 65 | Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution. |
| 2023-03-30 | CVE-2022-39197 | high | ⌖KEV | 50 | Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely. |