CVE-2023-4528: Java Deserialization Vulnerability in JSCAPE MFT (Fixed)

In August 2023, Rapid7 discovered CVE-2023-4528, a Java deserialization vulnerability in Redwood Software’s JSCAPE MFT secure managed file transfer product. Successful exploitation can run arbitrary Java code as the `root` on Linux or the `SYSTEM` user on Windows.

august code cve deserialization exploitation file file transfer java java deserialization linux managed managed file transfer mft product rapid7 root run software system transfer vulnerability vulnerability disclosure windows