writeups.xyz / CVE-2024-0204: Fortra GoAnywhere MFT Authentication Bypass Deep-Dive

Submitter : c2a

Date: 23 January 2024

Bounty : undisclosed

Vulnerabilities :

• Authentication Bypass
• Path Traversal
• Security Code Review
• Patch Diffing

Programs :

• Fortra (GoAnywhere)

Authors :

• Zach Hanley (@Hacks_zach)

Link :
https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive/