SSRF in Ateme Titan
CVE-2023-53893
Ateme TITAN File 3.9.12.4 contains an authenticated server-side request forgery vulnerability in the job callback URL parameter that allows attackers to bypass network restrictions. Attackers can exploit the unvalidated parameter to initiate file, service, and network enumeration by forcing the application to make HTTP, DNS, or file requests to arbitrary destinations.
Vulnerability class: SSRF (Server-Side Request Forgery)
EPSS: 0.002 (16.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.
Affected products
- Ateme Titan — versions 3.9.12.4
- Ateme Titan_file — versions 3.9.8.0, 3.9.9.2, 3.9.11.0
Weakness classification (CWE)
References
- disclosure@vulncheck.com (Exploit, Third Party Advisory, exploit)
- disclosure@vulncheck.com (Third Party Advisory, third-party-advisory)
- disclosure@vulncheck.com (Product, product)
- disclosure@vulncheck.com (Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2023-53893?
- CVE-2023-53893 is a medium-severity vulnerability in Ateme Titan, classified under Server-Side Request Forgery (SSRF). CVSS score: 6.5/10. Published 2025-12-15.
- How severe is CVE-2023-53893?
- Medium severity. CVSS v3 base score is 6.5 out of 10.