title: Fortra GoAnywhere MFT License Response Servlet Command Injection
description: Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.
problem types: CWE-502 Deserialization of Untrusted Data
affected:
{
defaultStatus: unaffected
product: Goanywhere MFT
vendor: Fortra
versions:
lessThanOrEqual: 7.1.1, status: affected, version: 0, versionType: semver
}