Maxum Rumpus
21 CVEs affecting Maxum Rumpus. Latest disclosed: 2025-11-17. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-27575 | High | 8.8 | 2021-03-08 | Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able… |
CVE-2020-27574 | High | 8.8 | 2021-03-08 | Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF). If an authenticated user visits a malicious page, unintended actions could be… |
CVE-2019-19659 | High | 8.8 | 2020-02-10 | A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a u… |
CVE-2022-46370 | High | 7.3 | 2023-01-12 | Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification. |
CVE-2025-55055 | Medium | 6.8 | 2025-11-17 | CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') |
CVE-2022-46369 | Medium | 6.8 | 2023-01-12 | Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting (PXSS) – vulnerability may allow inserting scripts into unspecified input fields. |
CVE-2022-46368 | Medium | 6.8 | 2023-01-12 | Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) – vulnerability may allow unauthorized action on behalf of authenticated users. |
CVE-2022-46367 | Medium | 6.8 | 2023-01-12 | Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation vulnerability that may allow privilege escalation. |
CVE-2022-39187 | Medium | 6.8 | 2023-01-12 | Rumpus - FTP server version 9.0.7.1 has a Reflected cross-site scripting (RXSS) vulnerability through unspecified vectors. |
CVE-2020-12737 | Medium | 6.5 | 2020-05-08 | An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a path traversal using double escaped characters, enabling read… |
CVE-2019-19665 | Medium | 6.5 | 2020-02-10 | A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Ser… |
CVE-2019-19663 | Medium | 6.5 | 2020-02-10 | A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1. This allows an attacker to Create/Delete Folders after explo… |
CVE-2019-19660 | Medium | 6.5 | 2020-02-10 | A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can manipulate… |
CVE-2020-8514 | Medium | 6.1 | 2020-02-02 | An issue was discovered in Rumpus 8.2.10 on macOS. By crafting a directory name, it is possible to activate JavaScript in the context of the web application af… |
CVE-2019-19368 | Medium | 6.1 | 2019-12-16 | A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link… |
CVE-2020-27576 | Medium | 5.4 | 2021-03-08 | Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS). Users are able to create folders in the web application. The folder name is insuffici… |
CVE-2025-55059 | Medium | 4.8 | 2025-11-17 | CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') |
CVE-2025-55056 | Medium | 4.8 | 2025-11-17 | Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') |
CVE-2025-55058 | Medium | 4.5 | 2025-11-17 | CWE-20 Improper Input Validation |
CVE-2025-55057 | Medium | 4.5 | 2025-11-17 | Multiple CWE-352 Cross-Site Request Forgery (CSRF) |