Cross site scripting

2020-02-1018:15:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.0%

JSON

A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP Server 8.2.9.1. A successful exploit can result in stored XSS, website defacement, etc. via ExtraHTTPHeader to RAPR/WebSettingsGeneralSet.html.

CPENameOperatorVersion
rumpus_ftpeq8.2.9.1

CPE	Name	Operator	Version
	rumpus_ftp	eq	8.2.9.1

References

github.com/harshit-shukla/CVE

github.com/harshit-shukla/CVE/blob/master/CVE-2019-19670.md