CVE-2020-27574

EUVD-2020-20082
Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF). If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 36%
Affected Products (NVD)
VendorProductVersion
maxumrumpus
8.2.13
maxumrumpus
8.2.14
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://maxum.com
https://tvrbk.github.io/cve/2021/03/07/rumpus.html
http://maxum.com
https://tvrbk.github.io/cve/2021/03/07/rumpus.html