{"id":"CVE-2024-1226","state":"PUBLISHED","title":"Multiple vulnerabilities in Rejetto's Http File Server","description":"The software does not neutralize or incorrectly neutralizes certain characters before the data is included in outgoing HTTP headers. The inclusion of invalidated data in an HTTP header allows an attacker to specify the full HTTP response represented by the browser. An attacker could control the response and craft attacks such as cross-site scripting and cache poisoning attacks.","publishedAt":"2024-03-12T15:07:18.532Z","updatedAt":"2024-08-05T17:48:59.065Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","source":"INCIBE"},"assigner":"INCIBE","products":["Rejetto  Http File Server "],"affected":[{"vendor":"Rejetto ","product":"Http File Server ","defaultStatus":"unaffected","versions":[{"version":"2.2a, build #124","status":"affected"}]}],"references":["https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-rejettos-http-file-server"],"weaknesses":["CWE-93"],"ingestedAt":"2026-10-29T20:06:59.846Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/1xxx/CVE-2024-1226.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-1226","state":"PUBLISHED","datePublished":"2024-03-12T15:07:18.532Z","dateUpdated":"2024-08-05T17:48:59.065Z","assignerShortName":"INCIBE","assignerOrgId":"0cbda920-cd7f-484a-8e76-bf7f4b7f4516","dateReserved":"2024-02-05T11:44:28.014Z"},"containers":{"cna":{"title":"Multiple vulnerabilities in Rejetto's Http File Server","descriptions":[{"lang":"en","value":"The software does not neutralize or incorrectly neutralizes certain characters before the data is included in outgoing HTTP headers. The inclusion of invalidated data in an HTTP header allows an attacker to specify the full HTTP response represented by the browser. An attacker could control the response and craft attacks such as cross-site scripting and cache poisoning attacks."}],"affected":[{"vendor":"Rejetto ","product":"Http File Server ","defaultStatus":"unaffected","versions":[{"version":"2.2a, build #124","status":"affected"}]}],"references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-rejettos-http-file-server"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-93","description":"CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"INCIBE","orgId":"0cbda920-cd7f-484a-8e76-bf7f4b7f4516","dateUpdated":"2024-03-12T15:07:22.921Z"},"credits":[{"lang":"en","type":"finder","value":"Rafael Pedrero"}],"datePublic":"2024-02-05T14:58:00.000Z","impacts":[{"capecId":"CAPEC-15","descriptions":[{"lang":"en","value":"CAPEC-15 Command Delimiters"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"\n\n<span style=\"background-color: rgb(255, 255, 255);\">The vulnerability has been fixed in subsequent versions. The affected version is not currently supported.</span>\n\n<br>"}],"value":"\nThe vulnerability has been fixed in subsequent versions. The affected version is not currently supported.\n\n"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-rejettos-http-file-server","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T18:33:25.120Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"rejetto","product":"http_file_server","defaultStatus":"unknown","versions":[{"version":"2.2a","status":"affected"}],"cpes":["cpe:2.3:a:rejetto:http_file_server:2.2a:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-05T15:41:01.852952Z","id":"CVE-2024-1226","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-05T17:48:59.065Z"}}]}}}