CVE-2023-22629

An issue was discovered in TitanFTP through 1.94.1205

High · published February 14, 2023

CVSS v3.1
8.8
EPSS
12%
Percentile
96.2
In the wild
Unconfirmed
What it is

An issue was discovered in TitanFTP through 1.94.1205. The move-file function has a path traversal vulnerability in the newPath parameter. An authenticated attacker can upload any file and then move it anywhere on the server's filesystem.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.12322 · 96.2th percentile
Published
2023-02-14T00:00Z
EPSS history
Timeline
  • 14 FEB 00:00Z
    An issue was discovered in TitanFTP through 1.94.1205
    cvelistv5