PT-2025-51311 · Ateme · Ateme Titan File

Published 2025-12-15 · Updated 2025-12-21 · CVE-2023-53893

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ateme TITAN File version 3.9.12.4

Description The software contains an authenticated server-side request forgery issue in the job callback URL parameter. This allows attackers to bypass network restrictions. Exploitation involves an unvalidated parameter that enables file, service, and network enumeration by forcing the application to make HTTP, DNS, or file requests to arbitrary destinations. The vulnerable parameter is the job callback URL.

Recommendations Apply a fix for Ateme TITAN File version 3.9.12.4 to address the server-side request forgery issue.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2023-53893

Affected Products

Ateme Titan File

References · 8

• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2023-5781.php · Exploit
• 🔥 https://exploit-db.com/exploits/51582 · Exploit
• https://osv.dev/vulnerability/CVE-2023-53893 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53893 · Security Note
• https://vulncheck.com/advisories/ateme-titan-file-authenticated-server-side-request-forgery-vulnerability · Note
• https://ateme.com/product-titan-software · Note
• https://twitter.com/CVEnew/status/2002857358704423239 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2000712509049688482 · Twitter Post