Description
Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| http_file_server | rejetto / http_file_server | >= 0, <= 2.3m | affected |
| HTTP File Server | Rejetto / HTTP File Server | >= 0, <= 2.3m | affected |