CVE-2023-53893mediumCWE-918

Ateme TITAN File 3.9 Authenticated Server-Side Request Forgery Vulnerability

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.3%

probabilidad de explotación

0.3%top 79% de las CVE

explotación observada

noninguna fuente lo reporta

Ateme TITAN File 3.9.12.4 contains an authenticated server-side request forgery vulnerability in the job callback URL parameter that allows attackers to bypass network restrictions. Attackers can exploit the unvalidated parameter to initiate file, service, and network enumeration by forcing the application to make HTTP, DNS, or file requests to arbitrary destinations.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Productos afectados

Ateme · TITAN

Referencias

https://www.ateme.com/product-titan-software/https://www.exploit-db.com/exploits/51582 https://www.vulncheck.com/advisories/ateme-titan-file-authenticated-server-side-request-forgery-vulnerability https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5781.php