CVE-2023-45685

creationtimestamp| type| source ---|---|--- 2023-10-16 20:31:53+00:00| seen| https://t.me/cibsecurity/72320 2023-10-17 15:31:27+00:00| seen| https://t.me/truesecator/4972 2023-10-24 13:45:15+00:00| seen| Telegram/tBDOQ7wGIm4uF9KAwql3-OJYIK58iv8Xyd6S-L2mLaft...

CVE-2023-45685

CVE-2023-45685 (and related CVEs 45686–45690) affect South River Technologies Titan MFT and Titan SFTP servers on Windows and Linux. The issues stem from insufficient path validation and path traversal, enabling an authenticated attacker (often with administrative/privileged access) to perform ac...

CVE-2023-45685 Arbitrary file write via "zip slip" in Titan MFT and Titan SFTP servers

Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal...

CVE-2023-45685 Arbitrary file write via "zip slip" in Titan MFT and Titan SFTP servers

Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal...