CVE-2021-46830

Description

A path traversal vulnerability exists within GoAnywhere MFT before 6.8.3 that utilize self-registration for the GoAnywhere Web Client. This vulnerability could potentially allow an external user who self-registers with a specific username and/or profile information to gain access to files at a higher directory level than intended.

Weakness classification

• nvd@nist.gov: CWE-22

Primary references

• cve@mitre.org — Permissions Required, Third Party Advisory
• cve@mitre.org — Mitigation, Vendor Advisory
• cve@mitre.org — Release Notes, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory