{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Fortra GoAnywhere MFT zero-day: Cl0p claims 130 victims · updates",
  "home_page_url": "https://pwn.watch/i/goanywhere-mft-cl0p-cve-2023-0669",
  "feed_url": "https://pwn.watch/i/goanywhere-mft-cl0p-cve-2023-0669/feed.json",
  "description": "A pre-auth deserialization/command injection in the GoAnywhere MFT admin console's License Response Servlet was exploited as a zero-day. The Cl0p gang said it stole data from more than 130 organisations, a rehearsal for the later MOVEit campaign.",
  "language": "en",
  "_pwn": {
    "slug": "goanywhere-mft-cl0p-cve-2023-0669",
    "severity": "high",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/goanywhere-mft-cl0p-cve-2023-0669/feed.xml",
    "llms": "https://pwn.watch/i/goanywhere-mft-cl0p-cve-2023-0669/llms.txt",
    "json": "https://pwn.watch/i/goanywhere-mft-cl0p-cve-2023-0669.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/goanywhere-mft-cl0p-cve-2023-0669#2023-02-10-3eddb3cb",
      "url": "https://pwn.watch/i/goanywhere-mft-cl0p-cve-2023-0669#2023-02-10-3eddb3cb",
      "title": "Fortra GoAnywhere MFT zero-day: Cl0p claims 130 victims: CISA adds CVE-2023-0669 to KEV; Cl0p claims it breached over 130 organisations",
      "content_text": "Fortra GoAnywhere MFT zero-day: Cl0p claims 130 victims: CISA adds CVE-2023-0669 to KEV; Cl0p claims it breached over 130 organisations\n\nSource: https://www.bleepingcomputer.com/news/security/clop-ransomware-claims-it-breached-130-orgs-using-goanywhere-zero-day/",
      "date_published": "2023-02-10T00:00:00.000Z",
      "external_url": "https://www.bleepingcomputer.com/news/security/clop-ransomware-claims-it-breached-130-orgs-using-goanywhere-zero-day/",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/goanywhere-mft-cl0p-cve-2023-0669#2023-02-07-738bf1c8",
      "url": "https://pwn.watch/i/goanywhere-mft-cl0p-cve-2023-0669#2023-02-07-738bf1c8",
      "title": "Fortra GoAnywhere MFT zero-day: Cl0p claims 130 victims: Emergency patch: GoAnywhere MFT 7.1.2",
      "content_text": "Fortra GoAnywhere MFT zero-day: Cl0p claims 130 victims: Emergency patch: GoAnywhere MFT 7.1.2\n\nSource: https://www.bleepingcomputer.com/news/security/actively-exploited-goanywhere-mft-zero-day-gets-emergency-patch/",
      "date_published": "2023-02-07T00:00:00.000Z",
      "external_url": "https://www.bleepingcomputer.com/news/security/actively-exploited-goanywhere-mft-zero-day-gets-emergency-patch/",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/goanywhere-mft-cl0p-cve-2023-0669#2023-02-01-a9d16d86",
      "url": "https://pwn.watch/i/goanywhere-mft-cl0p-cve-2023-0669#2023-02-01-a9d16d86",
      "title": "Fortra GoAnywhere MFT zero-day: Cl0p claims 130 victims: Fortra privately warns customers of an actively exploited zero-day in the GoAnywhere admin console",
      "content_text": "Fortra GoAnywhere MFT zero-day: Cl0p claims 130 victims: Fortra privately warns customers of an actively exploited zero-day in the GoAnywhere admin console\n\nSource: https://www.bleepingcomputer.com/news/security/actively-exploited-goanywhere-mft-zero-day-gets-emergency-patch/",
      "date_published": "2023-02-01T00:00:00.000Z",
      "external_url": "https://www.bleepingcomputer.com/news/security/actively-exploited-goanywhere-mft-zero-day-gets-emergency-patch/",
      "tags": [
        "high"
      ]
    }
  ]
}