Rejetto vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Rejetto products: 2 record(s), with severity, exploitation and fixes.

HTTP File Server 2

Exploited only (KEV) →

CVE-2024-23692 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-94 May 31, 2024

Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.

CVE-2014-6287 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-94 Oct 7, 2014

Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action.