Vulnerabilities

TI-2022-22913 CVE-2022-46370 · GHSA-6rqp-hf8j-7x29

Rumpus - FTP server Improper Token Verification

LOW 38

Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00231 Published 2023-01-12 No fix listed CWE-345

TI-2022-22912 CVE-2022-46369 · GHSA-574w-g6v4-fj73

LOW 32

Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting (PXSS) – vulnerability may allow inserting scripts into unspecified input fields.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00439 Published 2023-01-12 No fix listed CWE-79

TI-2022-22911 CVE-2022-46368 · GHSA-p528-mrgw-3q8p

LOW 38

Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) – vulnerability may allow unauthorized action on behalf of authenticated users.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00271 Published 2023-01-12 No fix listed CWE-352

TI-2022-22910 CVE-2022-46367 · GHSA-q4gj-rcjg-xcwr

MEDIUM 40

Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation vulnerability that may allow privilege escalation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00271 Published 2023-01-12 No fix listed CWE-352

TI-2022-18569 CVE-2022-39187 · GHSA-jw92-fcgv-875g

LOW 30

Rumpus - FTP server version 9.0.7.1 has a Reflected cross-site scripting (RXSS) vulnerability through unspecified vectors.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00431 Published 2023-01-12 No fix listed CWE-79