2024-07-09

Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityRansomware

Rejetto

Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request.

CWE-1336

RefsThe patched Rejetto HTTP File Server (HFS) is version 3 nvd.nist.gov

Federal remediation due 2024-07-30

CVE-2024-4040

2024-04-24

CrushFTP VFS Sandbox Escape Vulnerability

CrushFTP

CrushFTP contains an unspecified sandbox escape vulnerability that allows a remote attacker to escape the CrushFTP virtual file system (VFS).

CWE-1336

Refscrushftp.com nvd.nist.gov

Federal remediation due 2024-05-01

KEV Catalog