CVE-2024-23692 Scanner

Rejetto HTTP File Server is widely used for hosting files over an HTTP interface, allowing users to share files via a web browser. It’s a popular choice for small businesses and individuals looking for an easy way to set up a temporary file server. This software is designed to be lightweight with a simplistic interface and does not require extensive technical knowledge to deploy. Users favor it due to its flexibility and ability to serve files over various protocols, making it a versatile tool. It supports modern HTTP standards and is often employed in environments requiring minimal configuration. However, vulnerabilities in this tool can lead to severe security risks if not properly managed.

The Remote Code Execution (RCE) vulnerability detected in Rejetto HTTP File Server allows remote attackers to execute arbitrary commands on the server without proper authorization. It poses a significant security threat as it can be leveraged by attackers to gain unauthorized control over the server. Such vulnerabilities are critical as they provide attackers with high privileges, potentially compromising sensitive data and system integrity. This RCE vulnerability is relatively easy to exploit, given that attackers can send specially crafted requests that the server processes without adequate restrictions. Consequently, systems using this software are at risk of being commandeered by malicious entities. Enterprises using this tool should be particularly vigilant in patching and securing their installations.

The vulnerable endpoint in Rejetto HTTP File Server involves the handling of HTTP requests that manipulate untrusted user input. Attackers can exploit this by sending HTTP requests incorporating payloads to execute commands via the server. The template injection flaw allows attackers to abuse the server's response handling, thereby running unauthorized commands. Expressly, this vulnerability impacts the server's parsing functions, leading to the inadvertent execution of hostile code. The parameter manipulation through this mechanism is facilitated by insufficient input validation and output encoding. To exploit, attackers need only a direct connection to an exposed HTTP File Server instance.

When exploited, this vulnerability can have devastating effects, allowing attackers full control over the system. It could lead to unauthorized data access and modification, turning the server into a launchpad for further attacks within a network. An attacker could disrupt services, steal sensitive information, or deploy malware across the network. This sort of control is particularly severe because it can also lead to the installation of persistent threats or backdoors for long-term exploitation. Furthermore, the compromised system could be used to distribute malicious files or initiate attacks on other networks, severely affecting the victim's credibility and security posture.

REFERENCES

• https://github.com/rapid7/metasploit-framework/pull/19240
• https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/