CVE-2023-22629

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An issue was discovered in TitanFTP through 1.94.1205. The move-file function has a path traversal vulnerability in the newPath parameter. An authenticated attacker can upload any file and then move it anywhere on the server's filesystem.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/171737/Titan-FTP-Path-Traversal.html
https://f20.be/cves/titan-ftp-vulnerabilitiesExploit, Third Party Advisory
https://titanftp.comProduct
https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdfRelease Notes
http://packetstormsecurity.com/files/171737/Titan-FTP-Path-Traversal.html
https://f20.be/cves/titan-ftp-vulnerabilitiesExploit, Third Party Advisory
https://titanftp.comProduct
https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdfRelease Notes

Timeline

Published: Feb 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-22637.5The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing. The new ENIP connections cannot be establis CVE-2023-226304.3IzyBat Orange casiers before 20221102_1 allows SQL Injection via a getCasier.php?taille= URI.CVE-2023-226312.7PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor.CVE-2023-226322.7PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor.CVE-2023-226337.5An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and be CVE-2023-226357.8A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all CVE-2023-226363.3An unauthorized configuration download vulnerability in FortiWeb 6.3.6 through 6.3.21, 6.4.0 through 6.4.2 and 7.0.0 through 7.0.4 may allow CVE-2023-226379.0An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiNAC-F version 7.2.0, CVE-2023-226385.4Several improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9 CVE-2023-226397.8A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6 CVE-2023-22647.8An improper input validation vulnerability in the Schweitzer Engineering Laboratories SEL-411L could allow a malicious actor to manipulate a CVE-2023-226408.8A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, For