Medium · 6.8 CVE-2022-46368 EUVD-2022-49179GHSA-p528-mrgw-3q8p

Rumpus - FTP server Cross-site request forgery (CSRF) – Create user

Published Jan 12, 2023 · Updated Apr 8, 2025 · Assigned by INCD

Description

Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) – vulnerability may allow unauthorized action on behalf of authenticated users.

Vendor	Product	Affected	Fixed
Rumpus	FTP server	latest – < 9.0.7.1*	9.0.7.1*