Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine ยท updates https://pwn.watch/i/rejetto-http-file-server-cve-2024-23692 Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request. Added to the CISA KEV catalog on 2024-07-09. CISA lists known use in ransomware campaigns. en Tue, 09 Jul 2024 00:00:00 GMT Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine: CISA added CVE-2024-23692 to the KEV catalog (federal deadline 2024-07-30) https://pwn.watch/i/rejetto-http-file-server-cve-2024-23692 https://pwn.watch/i/rejetto-http-file-server-cve-2024-23692#2024-07-09-e52173be Tue, 09 Jul 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine: CVE-2024-23692 published https://pwn.watch/i/rejetto-http-file-server-cve-2024-23692 https://pwn.watch/i/rejetto-http-file-server-cve-2024-23692#2024-05-31-af481af8 Fri, 31 May 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-23692">Source</a></p>