CVE-2019-19666: Maxum Rumpus FTP

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

A CSRF vulnerability exists in the Event Notices Settings of Web File Manager in Rumpus FTP 8.2.9.1. An attacker can create/update event notices via RAPR/EventNoticesSet.html.

Affected products

• Maxum Rumpus FTP: version 8.2.9.1 only

Published 2020-02-10. Last modified 2026-06-17.