Advisories · Technology
rejetto hfs.
Every CVE that names rejetto hfs among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Rejetto HFS < 3.2.1 Limited File Disclosure via Path Traversal in lang Parameter
- rejetto hfs
- Path traversal
- CVSS 5.1 Medium
Rejetto HFS < 3.2.1 Stored XSS via File Names in Basic Web Listing
- rejetto hfs
- Cross-site scripting (XSS)
- CVSS 6.9 Medium
Rejetto HFS < 3.2.1 Username Enumeration via Login Response Differences
- rejetto hfs
- CWE-204
- CVSS 5.1 Medium
Rejetto HFS < 3.2.1 Cross-Site Request Forgery via GET Requests
- rejetto hfs
- Cross-site request forgery (CSRF)
- CVSS 5.3 Medium
Rejetto HFS < 3.2.1 Stored XSS in Admin Log Viewer
- rejetto hfs
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Key
- rejetto hfs
- Weak cryptography or TLS