high8.8
CVE-2020-27575
Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability.
Impact
Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able to manage users. The edit users form contains a parameter vulnerable to command injection due to insufficient validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Maxum | Rumpus | Versions 8.2.13, 8.2.14 |