CVE-2024-23692 Scanner
This scanner targets the Rejetto HFS web interface to detect a command injection flaw allowing unauthenticated remote code execution.
Used 3.4k times · 3.3k assets checked · url
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE
CVE-2024-23692
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
http file serverhttp_file_server
Updated Sep 28, 2026View on NVD →
S4E scanner
CVE history: http file server
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →