Description
Rejetto HTTP文件服务器是一个轻量级的HTTP服务器软件，它允许用户在本地计算机上快速搭建一个文件共享服务。2024年6月，互联网上披露其 2.x系列 存在CVE-2024-23692 远程代码执行漏洞，攻击者可在无需登陆的情况下利用模板注入执行任意代码，控制服服务器。
Rejetto HFS 2.x 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/pradeepboo/Rejetto-HFS-2.x-RCE-CVE-2024-23692
https://cloud.tencent.com/developer/article/2428579
https://www.tenable.com/plugins/nessus/206652
https://avd.aliyun.com/detail?id=AVD-2024-23692
https://nvd.nist.gov/vuln/detail/cve-2024-23692
https://www.vicarius.io/vsociety/posts/unauthenticated-rce-flaw-in-rejetto-http-file-server-cve-2024-23692
https://blog.csdn.net/huangyongkang666/article/details/139603162
https://www.tenablecloud.cn/plugins/was/114299
https://www.exploit-db.com/exploits/52102
https://vigneshwarks.medium.com/rejetto-hfs-2-3-x-rce-exploit-7e22f2e75618
https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-23692
https://csirt.divd.nl/cases/DIVD-2024-00026/
https://www.imperva.com/blog/imperva-detects-and-mitigates-rejetto-hfs-spray-and-pray-ransomware-trojan-campaign/
https://www.sentinelone.com/vulnerability-database/cve-2024-23692/
https://www.lmboke.com/archives/rejetto-http-file-serverdai-ma-zhi-xing-lou-dong-cve-2024-23692
https://blog.certcube.com/rce-in-rejetto-hfs-server-2-x-cve-2024-23692/
https://rejetto.com/forum/index.php?topic=13167.0
https://www.youtube.com/watch?v=-ljCGqV1JUE
https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/