Rejetto HTTP File Server (HFS) 2.3m

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:rejetto:http_file_server:2.3m:*:*:*:*:*:*:*

part: a version: 2.3m update: *

VendorRejetto (fd662d82-f138-58a8-9f46-6277e2bad373)
ProductHttp File Server (beabdb99-d6b6-5011-acab-33fea09d60d5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/rejetto/hfs purl2cpe 2026-06-01 10:12:07.134758
pkg:github/drapid/hfs purl2cpe 2026-06-01 10:12:07.134760
pkg:github/rejetto/hfs purl2cpe 2026-06-01 10:12:07.134761
pkg:npm/hfs purl2cpe 2026-06-01 10:12:07.134762
pkg:sourceforge/hfs purl2cpe 2026-06-01 10:12:07.134764

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-23692 vulnerable 2026-06-08 06:29:40.271692 Rejetto HTTP File Server 2.3m Unauthenticated RCE
CRITICAL (9.8)
Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.
Published: 2024-05-31T09:36:28.763Z
Updated: 2026-08-11T03:55:27.853Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13432 vulnerable 2026-06-08 05:18:00.615205 Details available
rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers.
Published: 2020-06-08T17:25:10.000Z
Updated: 2024-08-04T12:18:18.262Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.