Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks

Fortra, the company behind Cobalt Strike, shed light on a zero-day remote code execution (RCE) vulnerability in its GoAnywhere MFT tool that has come under active exploitation by ransomware actors to steal sensitive data.
The high-severity flaw, tracked as CVE-2023-0669 (CVSS score: 7.2), concerns a case of pre-authenticated command injection that could be abused to achieve code execution. The

attacks case cobalt cobalt strike code code execution command command injection cve cve-2023-0669 cvss data exploit exploitation flaw fortra goanywhere goanywhere mft high injection mft ransomware ransomware attacks rce remote code remote code execution score sensitive data severity shed steal strike the company tool under vulnerability zero-day zero-day exploit