medium6.5
CVE-2024-25156
A path traversal vulnerability exists in GoAnywhere MFT prior to 7.4.2 which allows attackers to circumvent endpoint-specific permission checks in the GoAnywhe…
Impact
A path traversal vulnerability exists in GoAnywhere MFT prior to 7.4.2 which allows attackers to circumvent endpoint-specific permission checks in the GoAnywhere Admin and Web Clients.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortra | Goanywhere Managed File Transfer | before 7.4.2 |