title: Arbitrary file write via "zip slip" in Titan MFT and Titan SFTP servers
description: Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal
problem types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
affected:
{
defaultStatus: unaffected
platforms: [Linux, Windows]
product: Titan MFT
vendor: South River Technologies
versions:
lessThanOrEqual: 2.0.17.2298, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
platforms: [Linux, Windows]
product: Titan SFTP
vendor: South River Technologies
versions:
lessThanOrEqual: 2.0.17.2298, status: affected, version: 0, versionType: semver
}
