by Kastro
Paper/Archive/CVE-2023-45685

CVE-2023-45685

South River Technologies Titan MFT — Arbitrary file write via "zip slip" in Titan MFT and Titan SFTP servers

EPSS 2%CVSS 9.1
critical.is priorityof 100
43
CVSS 9.1 (ADP, NVD agree)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 77.5.775 × 2015.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal

Affected

ProductAffectedFixed inSource
Titan MFT≤ 2.0.17.2298–CNA
Titan SFTP≤ 2.0.17.2298–CNA
titan_mft≤ 2.0.17.2298–CISA-ADP
titan_sftp≤ 2.0.17.2298–CISA-ADP

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
NVD9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refrapid7.com/blog/post/2023/10/16/multiple-vulnerabilities-in-south-river-technologies-titan-mft-and-titan-sftp-fixedrefhelpdesk.southrivertech.com/portal/en/kb/articles/security-patch-for-issues-cve-2023-45685-through-cve-2023-45690