CVE Watch—

CVE-2024-23692

Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

CVSS

—

Sin CVSS

EPSS

99.5%

p100

KEV

SÍ

9 jul 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.5%EPSS · 30 días99.5%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Rejetto / HTTP File Server

Vulnerabilidad

Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

Añadido a KEV

9 jul 2024

Remediar antes de

30 jul 2024

Uso conocido en ransomware

Descripción resumida

Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

The patched Rejetto HTTP File Server (HFS) is version 3: https://github.com/rejetto/hfs?tab=readme-ov-file#installation, https://www.rejetto.com/hfs/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-23692

CVEs relacionados

Sin CVEs relacionados por CWE o producto.