COOEY // HUBcompliance · community · intelligence

Exposures › CVE-2024-23692

CVE-2024-23692

Severity
high · on CISA KEV actively exploited
Source
CISA-KEV · kev
Published
2024-07-09
Reference
https://nvd.nist.gov/vuln/detail/CVE-2024-23692
⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request.

Players implicated

Rejetto · vendorHTTP File Server · product

Description

Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.