漏洞描述
Rejetto HTTP File Server（Rejetto HFS）是Rejetto公司的一款 HTTP 文件服务器。Rejetto HTTP FileServer 2.3m及之前版本存在安全漏洞，该漏洞源于存在模板注入漏洞。
Rejetto HTTP 文件服务器中的未经身份验证的 RCE（CVE-2024-23692）
PoC代码
暂无相关漏洞推荐
- POC cl-te-http-smuggling: Basic CL.TE - HTTP request smuggling
- POC te-cl-http-smuggling: Basic TE.CL - HTTP Request Smuggling
- POC CVE-2001-0537: Cisco IOS HTTP Configuration - Authentication Bypass
- POC CVE-2006-1681: Cherokee HTTPD <=0.5 - Cross-Site Scripting
- POC CVE-2014-2323: Lighttpd 1.4.34 SQL Injection and Path Traversal
- POC CVE-2017-15715: Apache httpd <=2.4.29 - Arbitrary File Upload
- POC CVE-2018-16133: Cybrotech CyBroHttpServer 1.0.3 - Local File Inclusion
- POC CVE-2018-18778: ACME mini_httpd <1.30 - Local File Inclusion
- POC CVE-2019-10092: Apache HTTP Server <=2.4.39 - HTML Injection/Partial Cross-Site Scripting
- POC CVE-2019-10098: Apache HTTP server v2.4.0 to v2.4.39 - Open Redirect
- POC CVE-2020-11984: Apache HTTP Server - Remote Code Execution
- POC CVE-2024-23334: aiohttp - Directory Traversal
- POC CVE-2024-23692: Rejetto HTTP File Server - Template injection