CVE-2023-53893

Ateme TITAN File 3.9 Authenticated Server-Side Request Forgery Vulnerability

CVSS 5.3 MEDIUMEPSS 0.2%CWE-918

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 5.3EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 dic 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Ateme TITAN File 3.9.12.4 contains an authenticated server-side request forgery vulnerability in the job callback URL parameter that allows attackers to bypass network restrictions. Attackers can exploit the unvalidated parameter to initiate file, service, and network enumeration by forcing the application to make HTTP, DNS, or file requests to arbitrary destinations.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Productos afectados

Ateme · TITAN

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://www.ateme.com/product-titan-software/https://www.exploit-db.com/exploits/51582 https://www.vulncheck.com/advisories/ateme-titan-file-authenticated-server-side-request-forgery-vulnerability https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5781.php