CVE-2024-0204 PoC — Authentication Bypass in GoAnywhere MFT

Source

https://github.com/adminlove520/CVE-2024-0204

Associated Vulnerability

Title: Authentication Bypass in GoAnywhere MFT (CVE-2024-0204)
Description:Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.

Description

GoAnywhere MFT

Readme

# CVE-2024-0204: Authentication Bypass in GoAnywhere MFT
Script to create a new admin user in GoAnywhere MFT.


## Usage
Password must be at least 8 characters long to meet GoAnywhere MFT complexity requirements.

```
% python3 CVE-2024-0204.py -h
usage: CVE-2024-0204 GoAnywhere Authentication Bypass [-h]
                                                      endpoint username
                                                      password

positional arguments:
  endpoint    The endpoint URL (e.g., http://127.0.0.1:8080)
  username    New admin username
  password    New admin password

optional arguments:
  -h, --help  show this help message and exit
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →