CVE-2023-45685criticalCWE-22

CVE-2023-45685: falha crítica em South River Technologies Titan MFT

Arbitrary file write via "zip slip" in Titan MFT and Titan SFTP servers

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Titan MFT+ Monitorar Titan SFTP

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.1epss 1.7%
Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
South River Technologies · Titan MFTSouth River Technologies · Titan SFTP
CVEs relacionadas — South River Technologies Titan MFT

No mesmo produto, das mais perigosas para as menos.

CVE-2023-45690—Information leak via default file permissions on Titan MFT and Titan SFTP serversEPSS 1.8%CVE-2023-45687HIGHAuthentication bypass via session fixation in Titan MFT and Titan SFTP serversEPSS 1.4%CVE-2023-45686HIGHArbitrary file write via WebDAV path traversal in Titan MFT and Titan SFTP serversEPSS 1.2%CVE-2023-45689—Arbitrary file read via path traversal in Titan MFT and Titan SFTP serversEPSS 1.0%CVE-2023-45688—Information leak via path traversal in Titan MFT and Titan SFTP serversEPSS 0.8%