VULNERABILITY INTELLIGENCE

CVE-2024-25156

CVSS score6.5 MEDIUM

EPSS probability0.39%

CISA KEVNot currently listed

Published2024-03-14

Last modified2026-06-17

Description

A path traversal vulnerability exists in GoAnywhere MFT prior to 7.4.2 which allows attackers to circumvent endpoint-specific permission checks in the GoAnywhere Admin and Web Clients.