CVE-2023-45688

CVSS V2 None CVSS V3 None
Description
Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to get the size of an arbitrary file on the filesystem using path traversal in the ftp "SIZE" command
Overview
  • CVE ID
  • CVE-2023-45688
  • Assigner
  • rapid7
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-10-16T16:14:41.841Z
  • Last Modified Date
  • 2023-10-16T16:15:00.585Z
Weakness Enumerations
CWE URL
CWE-22 http://cwe.mitre.org/data/definitions/22.html
References
Reference URL Reference Tags
https://www.rapid7.com/blog/post/2023/10/16/multiple-vulnerabilities-in-south-river-technologies-titan-mft-and-titan-sftp-fixed/
https://helpdesk.southrivertech.com/portal/en/kb/articles/security-patch-for-issues-cve-2023-45685-through-cve-2023-45690
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-45688
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45688
History
Created Old Value New Value Data Type Notes
2024-06-25 09:55:29 Added to TrackCVE