{"cvss":9.8,"datePublished":"2024-07-09","dateUpdated":"2024-07-09","description":"Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request.","dueDate":"2024-07-30","id":"CVE-2024-23692","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"The patched Rejetto HTTP File Server (HFS) is version 3: https://github.com/rejetto/hfs?tab=readme-ov-file#installation, https://www.rejetto.com/hfs/ ;   https://nvd.nist.gov/vuln/detail/CVE-2024-23692","product":"HTTP File Server","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability","vendor":"Rejetto"}