PatchTheCVECVE-2025-55058: CWE-20 Improper Input Validation
21
Routine
MEDIUM 4.5DOWNGRADE
CVE-2025-55058 is a medium-severity flaw (CVSS 4.5) affecting rumpus. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
CWE-20 Improper Input Validation
Why this priority
- No elevated risk signals yet
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 4.5 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | High |
| User interaction | Required |
| EPSS exploit chance | 0.3% (top 80%) |
| CISA exploited list | No |
| Weakness | CWE-20 |
| Published | 2025-11-17 |
| Last modified | 2026-10-07 |
Publisher (CNA): Israel National Cyber Directorate · Vendor: maxum
Last updated 2026-10-07 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
maxum rumpus DOWNGRADE
Affected: 9.0.12
Fixed in: no fixed release known
Safe to downgrade to: a release before 9.0.12
1. Check installed version
apt-cache policy rumpus || rpm -q rumpus || rumpus --version
2. No fixed release: DOWNGRADE to a release before 9.0.12 (Debian / Ubuntu)
apt-cache madison rumpus
sudo apt install rumpus=<VERSION_BEFORE_9.0.12>
sudo apt-mark hold rumpus
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list rumpus
sudo dnf downgrade rumpus-<VERSION_BEFORE_9.0.12>
sudo dnf versionlock add rumpus
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-55058?
rumpus: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2025-55058 being exploited?
CVE-2025-55058 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-55058 affect?
CVE-2025-55058 affects rumpus. Severity is medium (CVSS 4.5). CWE-20 Improper Input Validation
How urgent is CVE-2025-55058?
Priority 21/100. No elevated risk signals yet.
Related CVEs
- CVE-2025-55055 MEDIUM 6.8 DOWNGRADE CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- CVE-2025-55056 MEDIUM 4.8 DOWNGRADE Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
- CVE-2025-55059 MEDIUM 4.8 DOWNGRADE CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
- CVE-2025-55057 MEDIUM 4.5 DOWNGRADE Multiple CWE-352 Cross-Site Request Forgery (CSRF)