Cross-Site Scripting Vulnerability in Affected Product by Vendor
CVE-2025-55056

4.8MEDIUM

Key Information:

Vendor

Rumpus

Status
Ftp Server
Vendor
CVE Published:
17 November 2025

What is CVE-2025-55056?

This vulnerability involves improper neutralization of user input during web page generation, allowing malicious actors to execute arbitrary scripts in the browser of unsuspecting users. By exploiting this weakness, attackers can potentially access sensitive data or perform actions on behalf of users without their consent.

Affected Version(s)

FTP Server 9.0.12

References

https://www.gov.il/en/departments/dynamiccollectors/cve_a...

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Moshe Mizrahi, Almog Cygel, Naor Yaacob
JSON
.
CVE-2025-55056 : Cross-Site Scripting Vulnerability in Affected Product by Vendor