CVE-2023-45685

Description

Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal

References

https://helpdesk.southrivertech.com/portal/en/kb/articles/security-patch-for-issues-cve-2023-45685-through-cve-2023-45690

Details

Source: Mitre, NVD

Named Vulnerability: Zip Slip

Risk Information

CVSS v2

CVSS v3

EPSS