EUVD-2023-49978

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Lack of path validation in Titan MFT and SFTP allows file system access via path traversal attacks

Reporter	Title	Published	Views	Family All 53
BDU FSTEC	The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in the improper restriction on the path name to the restricted directory. This allows attackers to read arbitrary files from the file system.	19 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in the improper restriction on the path name to the restricted directory. This allows attackers to write files to any location within the file system.	20 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in improper session management, allowing attackers to execute arbitrary code.	20 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Titan SFTP and Titan MFT NextGen server software lies in improper default permissions, allowing unauthorized access by attackers to protected information.	20 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in the improper limitation of the path name for the restricted access directory. This allows a perpetrator to obtain an arbitrary file size from the file system.	20 Oct 202300:00	–	bdu_fstec
Circl	CVE-2023-45685	16 Oct 202320:31	–	circl
Circl	CVE-2023-45689	16 Oct 202320:31	–	circl
Circl	CVE-2023-45690	16 Oct 202320:32	–	circl
CNNVD	South River Technologies TitanFTP NextGen Security Vulnerability	16 Oct 202300:00	–	cnnvd
CNNVD	South River Technologies Titan MFT and Titan SFTP Path Traversal Vulnerabilities	16 Oct 202300:00	–	cnnvd

[
  {
    "enisaIdVendor": [
      {
        "id": "b7ef70c1-a993-3ca9-96c5-499ec307ea84",
        "vendor": {
          "name": "South River Technologies"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "5328c31c-ade1-3011-8269-9ab29f96d921",
        "product": {
          "name": "Titan MFT"
        },
        "product_version": "0 ≤2.0.17.2298"
      },
      {
        "id": "ba3ab0a0-0f8e-3864-b217-1db7c6331f29",
        "product": {
          "name": "Titan SFTP"
        },
        "product_version": "0 ≤2.0.17.2298"
      }
    ]
  }
]

Source	Link
rapid7	www.rapid7.com/blog/post/2023/10/16/multiple-vulnerabilities-in-south-river-technologies-titan-mft-and-titan-sftp-fixed/
helpdesk	www.helpdesk.southrivertech.com/portal/en/kb/articles/security-patch-for-issues-cve-2023-45685-through-cve-2023-45690

03 Oct 2025 20:07Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.5 - 9.1

EPSS0.00371

SSVC