TI-2024-15709 CVE-2024-23692 · GHSA-cw5c-xm7f-wx63
Rejetto HTTP File Server 2.3m Unauthenticated RCE
Priority CRITICAL 100KEV
Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability.
Rejetto
Records16All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Rejetto records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Http File Server · all components
TI-2014-05168 CVE-2014-6287 · GHSA-2hx5-63mq-crfj
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or…
Priority CRITICAL 100KEV
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action.
TI-2024-26831 CVE-2024-39943 · GHSA-5f4x-hwv2-w9w2
rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS…
Priority HIGH 82
rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if they have Upload permissions).
TI-2020-10536 CVE-2020-13432 · GHSA-grpf-5hh7-jc9q
rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are…
Priority MEDIUM 57
rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or lo…
TI-2014-06016 CVE-2014-7226 · GHSA-r6f8-vrm4-59ch
The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote…
Priority MEDIUM 45
The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote attackers to execute arbitrary code by uploading a file with certain invalid UTF-8 byte sequences that are interpreted as executab…