VULNERABILITY INTELLIGENCE

CVE-2024-23692

CVSS score9.8 CRITICAL
EPSS probability99.48%
CISA KEVKnown exploited vulnerability
Published2024-05-31
Last modified2026-08-11
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

Vendor / product: Rejetto / HTTP File Server

Description

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.

Weakness classification

  • disclosure@vulncheck.com: CWE-1336
  • nvd@nist.gov: CWE-94

Primary references