CVE-2020-27576

low-risk

Published 2021-03-08

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS). Users are able to create folders in the web application. The folder name is insufficiently validated resulting in a stored cross-site scripting vulnerability.

Do I need to act?

0.28% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.4/10 Medium

NETWORK / LOW complexity

Affected Products (2)

Rumpus

Affected Vendors

Maxum

References (4)

Product http://maxum.com

Third Party Advisory https://tvrbk.github.io/cve/2021/03/07/rumpus.html

Product http://maxum.com

Third Party Advisory https://tvrbk.github.io/cve/2021/03/07/rumpus.html

/ 100

low-risk

Severity 21/34 · High

Exploitability 1/34 · Minimal

Exposure 7/34 · Low