Vulnerabilities CVE-2024-23692

CVE-2024-23692

Critical

Open

KEV

TLP:CLEAR

Rejetto HTTP File Server 2.3m Unauthenticated RCE

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.

Details

CVSS Score: 9.8
EPSS Score ⓘ: 99.47%

99.9th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Confidence: 100%
Published: May 31, 2024
Last Modified: Aug 11, 2026
CISA KEV
Date Added: Jul 9, 2024
Patch Due: Jul 30, 2024
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.