CVE-2020-27574

HIGH

Maxum Rumpus 8.2.13 and 8.2.14 - Cross-Site Request Forgery

Title source: llm

Description

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF). If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user.

References (2)

Core 2

Core References

Product x_refsource_misc

http://maxum.com

Exploit, Third Party Advisory

https://tvrbk.github.io/cve/2021/03/07/rumpus.html

Scores

CVSS v3 8.8

EPSS 0.0077

EPSS Percentile 51.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-352

Status published

Products (2)

maxum/rumpus 8.2.13

maxum/rumpus 8.2.14

Published Mar 08, 2021

Tracked Since Feb 18, 2026