# CVE-2023-0669: Withdrawn: Fortra GoAnywhere MFT Deserialization of Untrusted Data vulnerability affects metasploit-framework

Source: https://junglewise.ai/threats/cve-2023-0669-fortra-goanywhere-mft-remote-code-execution-vulnerability  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2023-02-06. Updated: 2026-05-10  
License: CC BY 4.0 with a link back

CVE-2023-0669 · Severity: critical · CVSS 3.1 · Exploited in the wild · Published 2023-02-06

Fortra GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet. The flaw exists due to the deserialization of untrusted, attacker-controlled objects, allowing for command injection.

Technologies: [Fortra GoAnywhere MFT](https://junglewise.ai/threats/technologies/goanywhere-mft). Vendors: [Fortra](https://junglewise.ai/threats/vendors/fortra), [RubyGems](https://junglewise.ai/threats/vendors/rubygems).

## Quick answers

**Is CVE-2023-0669 exploited in the wild?** Yes. CVE-2023-0669 is known to be exploited in the wild, first recorded on 10 February 2023. Treat it as urgent.

**How severe is CVE-2023-0669?** Critical severity, with a CVSS score of 3.1, published 6 February 2023.

**Which products and versions are affected?** metasploit-framework (RubyGems) ECOSYSTEM:introduced=0,last_affected=6.0.33.

**Is there a fix for CVE-2023-0669?** A patch was published on 2023-02-15: NIST records indicate patch version 7.1.2 identified Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2023-0669 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2023-0669?** Check whether you run Fortra GoAnywhere MFT or metasploit-framework (RubyGems) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Fortra GoAnywhere Managed File Transfer (MFT) versions up to (excluding) 7.1.2

## Identifiers

- CVE-2023-0669
- GHSA-6pm2-j2v8-h3cj

## Timeline

- 2023-02-03: other: Exploitation of zero-day vulnerability reported by Rapid7
- 2023-02-06: disclosed: Public technical analysis published
- 2023-02-10: advisory
- 2023-02-10: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
- 2023-02-15: patched: NIST records indicate patch version 7.1.2 identified

## Related threats

- [Fortra GoAnywhere MFT path traversal in attachRemoteFiles endpoint](https://junglewise.ai/threats/cve-2026-15913-fortra-goanywhere-mft-path-traversal-in-attachremotefiles)
- [Fortra GoAnywhere MFT deserialization in License Servlet](https://junglewise.ai/threats/cve-2025-10035-fortra-goanywhere-mft-deserialization-in-license-servlet)
- [Metasploit Framework user exposes Metasploit to same deserialization issue that is exploited by that module](https://junglewise.ai/threats/cve-2020-7385-metasploit-framework-user-exposes-metasploit-to-same)