Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-45686

Arbitrary file write via WebDAV path traversal in Titan MFT and Titan SFTP servers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
rapid7

Description

Insufficient path validation when writing a file via WebDAV in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

South River Technologies Titan MFT

Default version status: unaffected

  • 0 to ≤ 2.0.17.2298affected

South River Technologies Titan SFTP

Default version status: unaffected

  • 0 to ≤ 2.0.17.2298affected

References