2023-10-16 18:00:28 +00:00
{
"id" : "CVE-2023-45686" ,
"sourceIdentifier" : "cve@rapid7.con" ,
"published" : "2023-10-16T17:15:10.040" ,
2023-10-16 20:00:28 +00:00
"lastModified" : "2023-10-16T18:33:43.730" ,
"vulnStatus" : "Awaiting Analysis" ,
2023-10-16 18:00:28 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Insufficient path validation when writing a file via WebDAV in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal"
}
] ,
"metrics" : { } ,
"weaknesses" : [
{
"source" : "cve@rapid7.con" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-22"
}
]
}
] ,
"references" : [
{
"url" : "https://helpdesk.southrivertech.com/portal/en/kb/articles/security-patch-for-issues-cve-2023-45685-through-cve-2023-45690" ,
"source" : "cve@rapid7.con"
} ,
{
"url" : "https://www.rapid7.com/blog/post/2023/10/16/multiple-vulnerabilities-in-south-river-technologies-titan-mft-and-titan-sftp-fixed/" ,
"source" : "cve@rapid7.con"
}
]
}