Approved changes feed: RSS · Atom

cpe:2.3:a:maxum:rumpus:8.2.13:*:*:*:*:*:*:*

part: a version: 8.2.13 update: *

VendorMaxum (c8fdc096-2fc4-57e9-a236-d44cdd741cf8)
ProductRumpus (ce062b4e-05c5-5d75-b018-a0cb4e8e729a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-27576 vulnerable 2026-06-08 05:23:52.791697 Details available
Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS). Users are able to create folders in the web application. The folder name is insufficiently validated resulting in a stored cross-site scripting vulnerability.
Published: 2021-03-08T21:13:16.000Z
Updated: 2026-07-09T00:11:47.613Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27575 vulnerable 2026-06-08 05:23:52.791186 Details available
Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able to manage users. The edit users form contains a parameter vulnerable to command injection due to insufficient validation.
Published: 2021-03-08T21:02:56.000Z
Updated: 2026-07-09T00:11:46.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27574 vulnerable 2026-06-08 05:23:52.789941 Details available
Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF). If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user.
Published: 2021-03-08T20:57:59.000Z
Updated: 2026-07-09T00:11:45.150Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.