CVE-2023-0669
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
10/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet due to deserializing an attacker-controlled object.
CISA Known Exploited Vulnerability
Vendor / Product
Fortra — GoAnywhere MFT
Date Added
2023-02-10
Remediation Due
2023-03-03
Ransomware Use
CONFIRMED
This CVE has a CISA AA located here: https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-158a. Please see the AA for associated IOCs. Additional information is available at: https://my.goanywhere.com/webclient/DownloadProductFiles.xhtml. Fortra users must have an account in order to login and access the patch.; https://nvd.nist.gov/vuln/detail/CVE-2023-0669
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| fortra | goanywhere_managed_file_transfer | < 7.1.2 |
References & Advisories (9)
US Government Resource
Product
Patch
Mitigation
Third Party Advisory
Mitigation
Third Party Advisory
Exploit
Third Party Advisory
VDB Entry
Exploit
Third Party Advisory
Exploit
Third Party Advisory
Broken Link
Third Party Advisory