Back to the CVE list
CVE-2024-23692 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA

Rejetto HTTP File Server 2.3m Unauthenticated RCE

CVSS score

9.8

EPSS probability

%99.5

Risk score

19.5

Published

2 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Rejetto HTTP File Server 2.3m - Remote Code Execution (RCE)

Exploit referenceSource updated: 28.03.2025 00:00:00

Nuclei: Rejetto HTTP File Server - Template injection

Exploit reference

CVE-2024-23692 Exploit

Public PoC

HFS 2.3m SERVER RCE Vulnerability exploit

Public PoC

CVE-2024-23692

Public PoC

Rejetto HTTP File Server (HFS) 2.x - Unauthenticated RCE exploit module (CVE-2024-23692)

Public PoC

sandimfz/CVE-2024-23692

Public PoC

CVE-2024-23692 exp

Public PoC

vanboomqi/CVE-2024-23692

Public PoC

POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692

Public PoC

CVE-2024-23692 | HFS 2.3m/2.4-RC07 RCE vulnerability fix

Public PoC

https://www.vicarius.io/vsociety/posts/cve-2024-23692-detect-rejetto-hfs-vulnerability

Exploit reference

https://www.vicarius.io/vsociety/posts/cve-2024-23692-rejetto-hfs-mitigate-vulnerability

Exploit reference

https://www.vicarius.io/vsociety/posts/unauthenticated-rce-flaw-in-rejetto-http-file-server-cve-2024-23692

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-23692"