CVE-2023-45688CWE-22

Information leak via path traversal in Titan MFT and Titan SFTP servers

published October 16, 2023

CVSS
—
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to get the size of an arbitrary file on the filesystem using path traversal in the ftp "SIZE" command

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00773 · 55.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2023-10-16T16:14Z
EPSS history
Timeline
  • 16 OCT 16:14Z
    Information leak via path traversal in Titan MFT and Titan SFTP servers
    cvelistv5