What’s Vulnerable › Vulnerabilities

CVE-2024-1227: Multiple vulnerabilities in Rejetto's Http File Server

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-12 · updated 2026-06-17
• Weakness: CWE-601

Description

An open redirect vulnerability, the exploitation of which could allow an attacker to create a custom URL and redirect a legitimate page to a malicious site.

Affected products

• Rejetto Http File Server: 2.2a, build #124

References

• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-rejettos-http-file-server
• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-rejettos-http-file-server

Get alerted when CVE-2024-1227 or the next vulnerability affects your stack