Http File Server

http_file_server

Vendor: Rejetto • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-39943 1Rejetto 1Http File Server Nov 21, 2024 Jul 4, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if they have Upload permissions). This occurs because a shell is used to execute df...Show more rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if they have Upload permissions). This occurs because a shell is used to execute df (i.e., with execSync instead of spawnSync in child_process in Node.js).Show less
CVE-2024-23692 1Rejetto 1Http File Server Oct 31, 2025 May 31, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected...Show more Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.Show less
CVE-2020-13432 1Rejetto 1Http File Server Nov 21, 2024 Jun 8, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or lo...Show more rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers.Show less
CVE-2014-7226 1Rejetto 1Http File Server May 6, 2026 Oct 10, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote attackers to execute arbitrary code by uploading a file with certain invalid UTF-8 byte sequences that are interpreted as executab...Show more The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote attackers to execute arbitrary code by uploading a file with certain invalid UTF-8 byte sequences that are interpreted as executable macro symbols.Show less
CVE-2014-6287 1Rejetto 1Http File Server Apr 22, 2026 Oct 7, 2014 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action.