Approved changes feed: RSS · Atom

cpe:2.3:a:fortra:goanywhere:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFortra (f14f6bd1-8bf2-53f9-b0d6-b2745f517ba7)
ProductGoanywhere (2bb649da-51f6-5b48-b467-fe235bcbd39f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-0049 vulnerable 2026-06-03 14:58:23.208657 Disclosure of sensitive information in an error message in GoAnywhere prior to version 7.8.0
LOW (3.5)
When a Web User without Create permission on subfolders attempts to upload a file to a non-existent directory, the error message includes the absolute server path which may allow Fuzzing for application mapping. This issue affects GoAnywhere: before 7.8.0.
Published: 2025-04-28T20:55:06.256Z
Updated: 2025-04-28T22:28:10.671Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.