Fortra GoAnywhere MFT License Response Servlet Command Injection
CVSS score
7.2
EPSS probability
%100.0
Risk score
14.4
Published
3 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
zakaria-laouani/cve-2023-0669-simulation
CVE-2023-0669 GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object.
GoAnywhere MFT CVE-2023-0669 LicenseResponseServlet Deserialization Vulnerabilities Python RCE PoC(Proof of Concept)
CVE-2023-0669 GoAnywhere MFT command injection vulnerability
Goanywhere Encryption helper 7.1.1 - Remote Code Execution (RCE)
Nuclei: Fortra GoAnywhere MFT - Remote Code Execution
Similar Vulnerabilities
Deserialization Vulnerability in GoAnywhere MFT's License Servlet
OS command injection in Fortra Core Privileged Access Manager Server
Fortra BoKS Manager crlserver command injection vulnerability
OS command injection in Fortra Core Privileged Access Manager Server
Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability
Path Traversal in Fortra's GoAnywhere MFT Endpoint
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-0669"