{"id":"CVE-2019-19668","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-19668","generatedAt":"2026-10-28T01:51:12.616Z","title":"A CSRF vulnerability exists in the File Types component of Web File Manager in Rumpus FTP 8.2.9.1 that allows an attacker to add or delete the file types that are used on the server via RAPR/TriggerServerFunction.html.","description":"A CSRF vulnerability exists in the File Types component of Web File Manager in Rumpus FTP 8.2.9.1 that allows an attacker to add or delete the file types that are used on the server via RAPR/TriggerServerFunction.html.","published":"2020-02-10T19:15:12.000Z","lastModified":"2026-06-17T02:27:02.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},"cwe":["CWE-352"],"affected":["maxum/rumpus ftp"],"epss":{"score":0.00379,"percentile":0.31668,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.38%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://github.com/harshit-shukla/CVE","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://github.com/harshit-shukla/CVE/blob/master/CVE-2019-19668.md","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://github.com/harshit-shukla/CVE","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/harshit-shukla/CVE/blob/master/CVE-2019-19668.md","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-19668","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}