coldbraid

CVE-2024-23692 Rejetto HTTP File Server

Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request.

CVSS
not scored

CWE-1336

On CISA’s exploited list

Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

Added
2024-07-09
Federal patch deadline
2024-07-30
Ransomware use
known