SSRF in Ateme Titan
CVE-2023-53893
Ateme TITAN File 3.9.12.4 contains an authenticated server-side request forgery vulnerability in the job callback URL parameter that allows attackers to bypass network restrictions. Attackers can exploit the unvalidated parameter to initiate file, service, and network enumeration by forcing the application to make HTTP, DNS, or file requests to arbitrary destinations.
Vulnerability class: SSRF (Server-Side Request Forgery)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.
EPSS exploit prediction
EPSS: 0.003 (18.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 19th percentile — 18.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: +0.000
Affected products
- Ateme Titan — versions 3.9.12.4
- Ateme Titan File — versions 3.9.8.0, 3.9.9.2, 3.9.11.0
Weakness classification (CWE)
References
- www.exploit-db.com/exploits/51582 (Exploit, Third Party Advisory, exploit)
- www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5781.php (Third Party Advisory, third-party-advisory)
- www.ateme.com/product-titan-software/ (Product, product)
- www.vulncheck.com/advisories/ateme-titan-file-authenticated-server-side-request… (Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2023-53893?
- CVE-2023-53893 is a medium-severity vulnerability in Ateme Titan, classified under Server-Side Request Forgery (SSRF). CVSS score: 6.5/10. Published 2025-12-15.
- How severe is CVE-2023-53893?
- Medium severity. CVSS v3 base score is 6.5 out of 10.