CVE-2019-19667: Maxum Rumpus FTP

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A CSRF vulnerability exists in the Block Clients component of Web File Manager in Rumpus FTP 8.2.9.1 that could allow an attacker to whitelist or block any IP address via RAPR/BlockedClients.html.

Affected products

• Maxum Rumpus FTP: version 8.2.9.1 only

Published 2020-02-10. Last modified 2026-06-17.