Exploit Code Released For Fortra GoAnywhere MFT Flaw

Proof-of-concept exploit code has been released for a recently disclosed critical vulnerability in Fortra's GoAnywhere Managed File Transfer (MFT) software.

Fortra on Monday publicly disclosed the vulnerability in an advisory, but the patch was made available to customers earlier on Dec. 7. The flaw (CVE-2024-0204) could enable remote, unauthenticated attackers to bypass authentication in order to create new users in the application. The proof-of-concept code released on Jan. 23 by researchers at Horizon3.ai outlines how the flaw can be exploited …

advisory attackers bypass code concept critical critical vulnerability customers cve dec enable exploit exploit code file file transfer flaw fortra fortra goanywhere fortra goanywhere mft goanywhere goanywhere mft managed managed file transfer mft monday patch proof proof-of-concept software transfer unauthenticated vulnerability