ACTIVELY EXPLOITED
CVE-2024-23692: Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
| Vendor | Rejetto |
|---|---|
| Product | HTTP File Server |
| Actively exploited | Yes |
| Added to CISA KEV | 9 Jul 2024 |
| CISA federal deadline | 30 Jul 2024 |
| Ransomware use | Known |
| Weakness (CWE) | CWE-1336 |
Required action (CISA's text)
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description (NVD)
Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request.
SOURCES
Other Rejetto flaws
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.