CVE-2023-22629

HIGHNuclei

TitanFTP 2.0.1.2102 - Path traversal to Remote Code Execution (RCE)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2023-22629 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit and 1 Nuclei template.

Description

An issue was discovered in TitanFTP through 1.94.1205. The move-file function has a path traversal vulnerability in the newPath parameter. An authenticated attacker can upload any file and then move it anywhere on the server's filesystem.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 20, 2025 · Source: CVE List

Proofs of concept

1

Catalogued exploits

ExploitDBTitanFTP 2.0.1.2102 - Path traversal to Remote Code Execution (RCE)ExploitDB exploitby Andreas FinstadNot analyzed1 file
ExploitDB
PoC details

Nuclei templates

1
ProjectDiscoveryHIGHTitanFTP move-file Function ≤ 1.94.1205 - Path TraversalCVSS 8.8

TitanFTP versions up to 1.94.1205 contain a path traversal vulnerability in the move-file function where the newPath parameter is improperly validated. An authenticated user can upload a file and then move it to any location on the server filesystem, potentially allowing arbitrary file placement and system compromise.

Impact

Authenticated attackers can exploit the move-file function to place files anywhere on the server filesystem using path traversal techniques, potentially overwriting system files, planting malicious executables, or compromising server integrity.

Remediation

Upgrade to TitanFTP version newer than 1.94.1205 that properly validates the newPath parameter in the move-file function.

WeaknessesCWE-22
Authorspussycat0x
Template tagscvecve2023networkftptitan-ftptcppassivevuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:southrivertech:titan_ftp_server:*:*:*:*:*:*:*:*
Shodan: product:"Titan ftpd"
http://packetstormsecurity.com/files/171737/Titan-FTP-Path-Traversal.html https://titanftp.com/ https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf

Source: ProjectDiscovery

References

5