Cross site request forgery (csrf)

2020-02-1018:15:00

PRIOn knowledge base

www.prio-n.com

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.8%

JSON

A CSRF vulnerability exists in the Event Notices Settings of Web File Manager in Rumpus FTP 8.2.9.1. An attacker can create/update event notices via RAPR/EventNoticesSet.html.

CPENameOperatorVersion
rumpus_ftpeq8.2.9.1

CPE	Name	Operator	Version
	rumpus_ftp	eq	8.2.9.1

References

github.com/harshit-shukla/CVE

github.com/harshit-shukla/CVE/blob/master/CVE-2019-19666.md