Path traversal

2023-10-1617:15:00

PRIOn knowledge base

www.prio-n.com

path traversal

insufficient validation

south river technologies

linux

authenticated attacker

file write

7.2 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

19.0%

JSON

Insufficient path validation when writing a file via WebDAV in South River Technologies’ Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal

CPENameOperatorVersion
titan_mfp_serverlt2.0.18

CPE	Name	Operator	Version
	titan_mfp_server	lt	2.0.18

References

helpdesk.southrivertech.com/portal/en/kb/articles/security-patch-for-issues-cve-2023-45685-through-cve-2023-45690

www.rapid7.com/blog/post/2023/10/16/multiple-vulnerabilities-in-south-river-technologies-titan-mft-and-titan-sftp-fixed/