CVE-2023-53893
Ateme TITAN File 3.9 Authenticated Server-Side Request Forgery Vulnerability
- State
- Published
- Severity
- 5.3 Medium
- Published
- Dec 15, 2025
- Updated
- Apr 7, 2026
- Reserved
- Dec 15, 2025
Description
Ateme TITAN File 3.9.12.4 contains an authenticated server-side request forgery vulnerability in the job callback URL parameter that allows attackers to bypass network restrictions. Attackers can exploit the unvalidated parameter to initiate file, service, and network enumeration by forcing the application to make HTTP, DNS, or file requests to arbitrary destinations.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
Weaknesses
- CWE-918 Server-Side Request Forgery (SSRF)
Affected Products
| Product | Versions |
|---|---|
TITANAteme |
|
References
- ExploitDB-51582exploit
- Zero Science Lab Disclosure (ZSL-2023-5781)third-party-advisory
- Ateme Titan Product Webpageproduct
- VulnCheck Advisory: Ateme TITAN File 3.9 Authenticated Server-Side Request Forgery Vulnerabilitythird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.