.. / CVE-2023-0669

Exploit for Fortra GoAnywhere MFT - Remote Code Execution (CVE-2023-0669)

Description:

Fortra GoAnywhere MFT is susceptible to remote code execution via unsafe deserialization of an arbitrary attacker-controlled object. This stems from a pre-authentication command injection vulnerability in the License Response Servlet.

Nuclei Template

View the template here CVE-2023-0669.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-0669.yaml
Copy

References:

https://infosec.exchange/@briankrebs/109795710941843934
https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml#zerodayfeb1
https://nvd.nist.gov/vuln/detail/CVE-2023-0669
https://www.rapid7.com/blog/post/2023/02/03/exploitation-of-goanywhere-mft-zero-day-vulnerability/
https://frycos.github.io/vulns4free/2023/02/06/goanywhere-forgotten.html