Security Advisory

CVE-2025-52669

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-11-20 19:10:15
Last updated 2025-11-20 21:43:25
Assigner hackerone
State PUBLISHED

Description

Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to have access to the contact name and email address of other users on the system.