writeups.xyz / Unauthenticated RCE in Goanywhere

Submitter : c2a

Date: 22 February 2023

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• RCE
• Security Code Review

Programs :

• Fortra (GoAnywhere)

Authors :

• Youssef Muhammad (@Yosef0x1)

Link :
https://www.vicarius.io/vsociety/blog/unauthenticated-rce-in-goanywhere