Cpe:2.3:a:hfs:hfs2:*:*:*:*:*:*:*:*

HFS2 version 2.4.0 and earlier contains a template injection vulnerability in the multipart upload handler that allows unauthenticated attackers to achieve remote code execution.