Beveiligingsadvies

CVE-2021-22889

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-03-25 19:40:55

Laatst bijgewerkt 2024-08-03 18:58:24

Toegewezen door hackerone

CVSS-score geen score

Status PUBLISHED

Beschrijving

Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `statsBreakdown` parameter of stats.php (and possibly other scripts) due to single quotes not being escaped. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and pressing a certain key combination to execute injected JavaScript code.

← Alle CVE's bekijken Bekijk op cve.org ↗