Goby漏洞更新｜GoAnywhere MFT 反序列化漏洞（CVE-2023-0669）

Gobysec

于 2023-04-13 13:20:42 发布

阅读量290

点赞数

分类专栏：红队版 Goby 漏洞文章标签： GoAnywhere 反序列化 CVE-2023-0669

本文链接：https://blog.csdn.net/m0_46699477/article/details/130128169

版权

Goby 同时被 3 个专栏收录

182 篇文章 30 订阅

订阅专栏

漏洞

131 篇文章 3 订阅

订阅专栏

红队版

111 篇文章 3 订阅

订阅专栏

漏洞名称： GoAnywhere MFT 反序列化漏洞（CVE-2023-0669）

English Name：GoAnywhere MFT Deserialization Vulnerability (CVE-2023-0669)

CVSS core: 9.8

影响资产数：4399

漏洞描述：

GoAnywhere MFT is a solution for managing file transfer, which simplifies data exchange between systems, employees, customers and trading partners. It provides centralized control through extensive security settings, detailed audit trails, and helps to process information in files into XML, EDI, CSV, and JSON databases. There is a Java deserialization vulnerability in GoAnywhere MFT. An attacker can use this vulnerability to execute arbitrary code, execute commands on the server, enter memory horses, etc., and obtain server privileges.

漏洞影响：

There is a Java deserialization vulnerability in GoAnywhere MFT. An attacker can use this vulnerability to execute arbitrary code, execute commands on the server, enter memory horses, etc., and obtain server privileges.