CVE-2024-23692 PoC — Rejetto HTTP File Server 2.3m Unauthenticated RCE

Source

https://github.com/0x20c/CVE-2024-23692-EXP

Associated Vulnerability

Title:Rejetto HTTP File Server 2.3m Unauthenticated RCE (CVE-2024-23692)
Description:Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.

Description

CVE-2024-23692 Exploit

Readme

# CVE-2024-23692-EXP

<br/>

```bash
bash CVE-2024-23692.sh <url> <command>
```

<br/>

![bash](2024_06_18_11_32_04.png)


<br/>

Nuclei

```bash
nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt
```

<br/>

![nuclei](2024_06_18_11_38_22.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!