CVE-2021-46830
Medium
Description
A path traversal vulnerability exists within GoAnywhere MFT before 6.8.3 that utilize self-registration for the GoAnywhere Web Client. This vulnerability could potentially allow an external user who self-registers with a specific username and/or profile information to gain access to files at a higher directory level than intended.
SeverityMedium
CVSS6.5
Exploit probability—
ProductHelpsystems Goanywhere Managed File Transfer
PublishedJul 27, 2022
First seenJul 27, 2022
How to fix
Update
- helpsystems goanywhere_managed_file_transfer6.8.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| helpsystems goanywhere_managed_file_transfer | v < 6.8.3 | 6.8.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.