Rejetto: community verdicts
2 notable / known-exploited Rejetto CVEs the community has triaged.
ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Rejetto CVE, see NVD ↗.
Show as table
| Year published | CVEs | In CISA KEV |
|---|---|---|
| 2014 | 1 | 1 |
| 2015 | 0 | 0 |
| 2016 | 0 | 0 |
| 2017 | 0 | 0 |
| 2018 | 0 | 0 |
| 2019 | 0 | 0 |
| 2020 | 0 | 0 |
| 2021 | 0 | 0 |
| 2022 | 0 | 0 |
| 2023 | 0 | 0 |
| 2024 | 1 | 1 |
Exploitation first, with newly exploited CVEs rising above old ones
- CVE-2024-23692CRIT 9.8KEVEPSS 99%
Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.
- CVE-2014-6287CRIT 9.8KEVEPSS 99%
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action.