HF
Product
HTTP File Server
On CISA KEVExploited in the wildRansomware-linked
5
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 0Low 0
Watch
Add HTTP File Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-39943 | 8.8 | Jul 4 | rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if they have Upload permissions) Affected: before 0.52.10 |
| CVE-2020-13432 | 7.5 | Jun 8 | rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an invalid-pointer write access violation via… Affected: 2.3m |
Showing 2