CVE-2023-22629 PoC — South River Technologies TitanFTP NextGen 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-22629.yaml

Associated Vulnerability

Title: South River Technologies TitanFTP NextGen 路径遍历漏洞 (CVE-2023-22629)
Description:An issue was discovered in TitanFTP through 1.94.1205. The move-file function has a path traversal vulnerability in the newPath parameter. An authenticated attacker can upload any file and then move it anywhere on the server's filesystem.

Description

TitanFTP versions up to 1.94.1205 contain a path traversal vulnerability in the move-file function where the newPath parameter is improperly validated. An authenticated user can upload a file and then move it to any location on the server filesystem, potentially allowing arbitrary file placement and system compromise.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →