Cross site request forgery (csrf)

2020-02-1017:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.8%

JSON

A CSRF vulnerability exists in the Web File Manager’s Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can Create and Delete accounts via RAPR/TriggerServerFunction.html.

CPENameOperatorVersion
rumpus_ftpeq8.2.9.1

CPE	Name	Operator	Version
	rumpus_ftp	eq	8.2.9.1

References

github.com/harshit-shukla/CVE

github.com/harshit-shukla/CVE/blob/master/CVE-2019-19662.md