Skip to content
OpenAdvisories

Package · npm

hfs

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2024-39943 Public exploit EPSS 39%

    rejetto HFS vulnerable to OS Command Execution by remote authenticated users

    rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if they have Upload permissions). This occurs because a shell is used to execute df (i.e., with execSync instead of spawnS…

    hfs npm