Vulnerabilities

TI-2024-26831 CVE-2024-39943 · GHSA-5f4x-hwv2-w9w2

rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS…

HIGH 82

rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if they have Upload permissions).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.39474 Published 2024-07-04 Fixed in 0.52.10 CWE-284

TI-2024-15709 CVE-2024-23692 · GHSA-cw5c-xm7f-wx63

Rejetto HTTP File Server 2.3m Unauthenticated RCE

CRITICAL 100KEV

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99485 Published 2024-05-31 No fix listed CWE-1336

TI-2020-10536 CVE-2020-13432 · GHSA-grpf-5hh7-jc9q

rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are…

MEDIUM 57

rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or lo…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.30865 Published 2020-06-08 No fix listed CWE-120

TI-2014-06016 CVE-2014-7226 · GHSA-r6f8-vrm4-59ch

The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote…

MEDIUM 45

The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote attackers to execute arbitrary code by uploading a file with certain invalid UTF-8 byte sequences that are interpreted as executab…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09185 Published 2014-10-10 No fix listed CWE-94

TI-2014-05168 CVE-2014-6287 · GHSA-2hx5-63mq-crfj

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or…