A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1. This allows an attacker to Create/Delete Folders after exploiting it at RAPR/FolderSetsSet.html.
| Software | From | Fixed in |
|---|---|---|
| maxum / rumpus | 8.2.9.1 | 8.2.9.1.x |