HF
Product
HTTP File Server
On CISA KEVExploited in the wildRansomware-linked
5
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 0Low 0
Watch
Add HTTP File Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-23692 RansomwareIn wildKEV | 9.8 | May 31 | Rejetto HTTP File Server 2.3m Unauthenticated RCE Affected: through 2.3m |
| CVE-2014-6287 In wildKEV | 9.8 | Oct 7 | Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability Affected: 2.3 before 2.3c |
| CVE-2024-39943 | 8.8 | Jul 4 | rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if they have Upload permissions) Affected: before 0.52.10 |
| CVE-2020-13432 | 7.5 | Jun 8 | rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via… Affected: 2.3m |
| CVE-2014-7226 | – | Oct 10 | The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote attackers to execute arbitrary code by uploading a file with certain invalid UTF-8 byte… Affected: through 2.3c |
Showing 5