Published: 26/01/2021 Updated: 02/02/2021

CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 516

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Revive Adserver prior to 5.1.0 is vulnerable to open redirects via the `dest`, `oadest`, and/or `ct0` parameters of the lg.php and ck.php delivery scripts. Such open redirects had previously been available by design to allow third party ad servers to track such metrics when delivering ads. However, third party click tracking via redirects is not a viable option anymore, leading to such open redirect functionality being removed and reclassified as a vulnerability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
revive-adserver revive adserver

Revive Adserver versions 505 and below suffer from persistent and reflective cross site scripting and open redirection vulnerabilities ...

Full Disclosure mailing list archives   By Date By Thread </form>    [REVIVE-SA-2021-001] Revive Adserver Vulnerabilities   From: Matt ...

A PoC exploit for CVE-2021-22873 - Revive Adserver Open Redirect Vulnerability.

CVE-2021-22873 - Revive Adserver Open Redirect Vulnerability Revive Adserver before version 510 is vulnerable to open redirects via the dest, oadest, and/or ct0 parameters of the lgphp and ckphp delivery scripts Originally, this functionality was designed to allow third-party ad servers to track metrics when delivering ads However, due to security concerns, third-party cl

CWE-601 http://packetstormsecurity.com/files/161070/Revive-Adserver-5.0.5-Cross-Site-Scripting-Open-Redirect.html http://seclists.org/fulldisclosure/2021/Jan/60 https://github.com/revive-adserver/revive-adserver/issues/1068 https://hackerone.com/reports/1081406 https://www.revive-adserver.com/security/revive-sa-2021-001/https://nvd.nist.gov https://github.com/K3ysTr0K3R/CVE-2021-22873-EXPLOIT http://seclists.org/fulldisclosure/2021/Jan/60

CVE-2021-22873

Vulnerability Summary

Vulnerability Trend

Exploits

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect