CVE-2024-0204

Mô tả

Tham khảo

• packetstormsecurity.com/files/176683/GoAnywhere-MFT-Authentication-Bypass.html · Third Party Advisory
• packetstormsecurity.com/files/176974/Fortra-GoAnywhere-MFT-Unauthenticated-Remote-Code-Execution.html
• my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml · Permissions Required
• fortra.com/security/advisory/fi-2024-001 · Vendor Advisory

Lỗ hổng khác của goanywhere managed file transfer

• CVE-2026-1089TRUNG BÌNH 6.5User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers to trigger a DNS lookup, as well as DNS Rebi…
• CVE-2026-0972TRUNG BÌNH 5.4HTML injection is possible in system generated emails in Fortra's GoAnywhere MFT prior to 7.10.0. Note: The title, details, and descriptio…
• CVE-2026-0971TRUNG BÌNH 4.3An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected t…
• CVE-2025-1241TRUNG BÌNH 4.9Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which a…
• CVE-2025-14362CAO 7.3The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to…