CVE-2023-45689

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker with administrative privileges to read any file on the filesystem via path traversal

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

EPSS

0.82% chance of exploitation in the next 30 days, 55th percentile

Published

2023-10-16

Updated

2024-09-16

Proof-of-concept exploits (1)

• https://www.rapid7.com/blog/post/2023/10/16/multiple-vulnerabilities-in-south-river-techn…

References

• CVE Record
• NVD entry

Related

• CVE-2023-45688
• CVE-2023-45690
• CVE-2023-45687
• CVE-2023-45744
• CVE-2023-45686
• CVE-2023-45779