Description
When a Web User without Create permission on subfolders attempts to upload a file to a non-existent directory, the error message includes the absolute server path which may allow Fuzzing for application mapping.
This issue affects GoAnywhere: before 7.8.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortra | GoAnywhere | < 7.8 | 7.8 |
Advisories 1
- WID-SEC-2025-0894 Fortra GoAnywhere MFT: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 28, 2025