If you weren't planning on threat actors going everywhere with your data, but you use GoAnywhere, patch now. Authentication bypass allows unauthorized entities to create admin users 🤦♂️
https://www.fortra.com/security/advisory/fi-2024-001
Jake Williams /
npub1z6…8y2qk
2024-01-23 21:08:08
Author Public Key
npub1z6m9tqurpz2m92ls4pl4mf20wf0cppquex2kvuwew3kj47kteccqp8y2qkPublished at
2024-01-23 21:08:08Event JSON
{
"id": "8f1de4211b7808ff7547368e98f9e06c435ace24fca5af07b47f4d96229272a9",
"pubkey": "16b65583830895b2abf0a87f5da54f725f80841cc9956671d9746d2afacbce30",
"created_at": 1706040488,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/users/malwarejake/statuses/111807069426164814",
"activitypub"
]
],
"content": "If you weren't planning on threat actors going everywhere with your data, but you use GoAnywhere, patch now. Authentication bypass allows unauthorized entities to create admin users 🤦♂️\nhttps://www.fortra.com/security/advisory/fi-2024-001",
"sig": "3d53ccbaf049431b04e5c2abfec09363d951bd977031b369fd6d2d5c8c059c8daeed3aa16306f641c42483a4f23a4df37a09941b1c2d5d2ed76a36b1568b604a"
}