cve.bz

CVE-2023-0669

7.2 highKEVEPSS 100%

High (7.2) in Fortra GoAnywhere MFT. In CISA KEV since 2023-02-10, with known ransomware use. EPSS 100% chance of exploitation in the next 30 days.

Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

Severity

CVSS 3.1

7.2 high
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
100% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CISA KEV
listed 2023-02-10, due 2023-03-03, known ransomware use
CWE
CWE-502
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON