CVE-2019-19667

Опубликовано: 10 фев. 2020

Источник: nvd

CVSS3: 5.4

CVSS2: 5.8

EPSS Низкий

Описание

A CSRF vulnerability exists in the Block Clients component of Web File Manager in Rumpus FTP 8.2.9.1 that could allow an attacker to whitelist or block any IP address via RAPR/BlockedClients.html.

Ссылки

https://github.com/harshit-shukla/CVE
Third Party Advisory
https://github.com/harshit-shukla/CVE/blob/master/CVE-2019-19667.md
Third Party Advisory
https://github.com/harshit-shukla/CVE
Third Party Advisory
https://github.com/harshit-shukla/CVE/blob/master/CVE-2019-19667.md
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:maxum:rumpus_ftp:8.2.9.1:*:*:*:*:windows:*:*

EPSS

Процентиль: 38%

0.00164

Низкий

5.4 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-vg76-5r64-fww4

github

больше 3 лет назад