Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2023-45685

Arbitrary file write via "zip slip" in Titan MFT and Titan SFTP servers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
rapid7

Description

Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

South River Technologies Titan MFT

Default version status: unaffected

  • 0 to ≤ 2.0.17.2298affected

South River Technologies Titan SFTP

Default version status: unaffected

  • 0 to ≤ 2.0.17.2298affected

References