← CVE Intelligence

CVE-2024-25156

Path traversal in GoAnywhere MFT 7.4.1 and Earlier PUBLISHED

Description (CNA)

A path traversal vulnerability exists in GoAnywhere MFT prior to 7.4.2 which allows attackers to circumvent endpoint-specific permission checks in the GoAnywhere Admin and Web Clients.

Affected (CNA)

Vendor / productVersions
Fortra / GoAnywhere MFTaffected 6.0.1 through 7.4.1

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.