CVE-2019-19670: Maxum Rumpus FTP

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP Server 8.2.9.1. A successful exploit can result in stored XSS, website defacement, etc. via ExtraHTTPHeader to RAPR/WebSettingsGeneralSet.html.

Affected products

• Maxum Rumpus FTP: version 8.2.9.1 only

Published 2020-02-10. Last modified 2026-06-17.