Unscored CVE-2019-19670 EUVD-2019-9280GHSA-fmp2-fgq3-89w8

A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP Server 8.2.9.1. A su…

Published Feb 10, 2020 · Updated Aug 5, 2024 · Assigned by mitre

Description

A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP Server 8.2.9.1. A successful exploit can result in stored XSS, website defacement, etc. via ExtraHTTPHeader to RAPR/WebSettingsGeneralSet.html.

References

https://github.com/harshit-shukla/CVE
https://github.com/harshit-shukla/CVE/blob/master/CVE-2019-19670.md