Wiz
Vulnerability DatabaseCVE-2019-19663

CVE-2019-19663: 
Rumpus vulnerability analysis and mitigation

Overview

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1. The vulnerability was disclosed on February 10, 2020. This security flaw affects the Maxum Rumpus FTP Server software, specifically version 8.2.9.1 (NVD, GitHub Advisory).

Technical details

The vulnerability exists in the Folder Sets Settings component accessible via RAPR/FolderSetsSet.html. The CVSS v3.1 base score is 6.5 (Medium), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N. The vulnerability is classified as CWE-352: Cross-Site Request Forgery (NVD).

Impact

The vulnerability allows an attacker to create and delete folders on behalf of authenticated users without their knowledge or consent. When successfully exploited, this can result in unauthorized deletion of specified folders created by administrators or other users (GitHub Advisory).

Mitigation and workarounds

The vulnerability affects Rumpus FTP version 8.2.9.1. Users should upgrade to a patched version of the software if available. Additionally, implementing CSRF tokens and proper request validation can help prevent such attacks (NVD).

Additional resources

Source: This report was generated using AI

Related Rumpus vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-55058CRITICAL9.8
  • RumpusRumpus
  • cpe:2.3:a:maxum:rumpus
NoNoNov 17, 2025
CVE-2025-55055CRITICAL9.8
  • RumpusRumpus
  • cpe:2.3:a:maxum:rumpus
NoNoNov 17, 2025
CVE-2025-55057HIGH8.8
  • RumpusRumpus
  • cpe:2.3:a:maxum:rumpus
NoNoNov 17, 2025
CVE-2025-55059MEDIUM6.1
  • RumpusRumpus
  • cpe:2.3:a:maxum:rumpus
NoNoNov 17, 2025
CVE-2025-55056MEDIUM6.1
  • RumpusRumpus
  • cpe:2.3:a:maxum:rumpus
NoNoNov 17, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

Cloud Threat Landscape

A threat intelligence database

PEACH

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management
Get a demo