Vulnerabilities > Rejetto > Http File Server > 0.40.0

DATE CVE VULNERABILITY TITLE RISK
2024-07-04 CVE-2024-39943 OS Command Injection vulnerability in Rejetto Http File Server
rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if they have Upload permissions).
network
low complexity
rejetto CWE-78
8.8
8.8
2024-05-31 CVE-2024-23692 Code Injection vulnerability in Rejetto Http File Server
Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability.
network
low complexity
rejetto CWE-94
critical
 9.8
9.8