GoAnywhere MFT #CVE_2024_0204 is... path traversal.
[bullshitpath]/..;/wizard/InitialAccountSetup.xhtml re-runs the initial setup wizard, and lets attackers create their own admin account.
https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive/