Vulnerability · Published Dec 15, 2025 · Assigned by VulnCheck

CVE-2023-53893Ateme TITAN File 3.9 Authenticated Server-Side Request Forgery Vulnerability

Medium 5.3

In plain English

A medium-severity server-side request forgery in TITAN from Ateme. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 4.0)5.3Medium

Exploit odds (30 days)0.3%top 79.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Ateme TITAN File 3.9.12.4 contains an authenticated server-side request forgery vulnerability in the job callback URL parameter that allows attackers to bypass network restrictions. Attackers can exploit the unvalidated parameter to initiate file, service, and network enumeration by forcing the application to make HTTP, DNS, or file requests to arbitrary destinations.

Affected products (as reported)

Vendor	Product	Versions
Ateme	TITAN	3.9.12.4

Weakness: CWE-918 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

References

ExploitDB-51582 exploit
Zero Science Lab Disclosure (ZSL-2023-5781) third-party-advisory
Ateme Titan Product Webpage product
VulnCheck Advisory: Ateme TITAN File 3.9 Authenticated Server-Side Request Forgery Vulnerability third-party-advisory