CVE-2024-25156 Information

Description

A path traversal vulnerability exists in GoAnywhere MFT prior to 7.4.2 which allows attackers to circumvent endpoint-specific permission checks in the GoAnywhere Admin and Web Clients.

Reference

https://www.fortra.com/security/advisory/fi-2024-004