Medium severity4.3NVD Advisory· Published Oct 16, 2023· Updated Jun 17, 2026

CVE-2023-45688

Description

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to get the size of an arbitrary file on the filesystem using path traversal in the ftp "SIZE" command

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

South River Technologies/Titan Mft Server
cpe:2.3:a:southrivertech:titan_mft_server:*:*:*:*:*:linux:*:*
Range: <2.0.18
South River Technologies/Titan SFTP Server
cpe:2.3:a:southrivertech:titan_sftp_server:*:*:*:*:*:linux:*:*
Range: <2.0.18
South River Technologies/Titan Mftllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 0
South River Technologies/Titan SFTPllm-fuzzy

Patches

Vulnerability mechanics

References

www.rapid7.com/blog/post/2023/10/16/multiple-vulnerabilities-in-south-river-technologies-titan-mft-and-titan-sftp-fixed/nvdExploitThird Party Advisory
helpdesk.southrivertech.com/portal/en/kb/articles/security-patch-for-issues-cve-2023-45685-through-cve-2023-45690nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000