Description
Revive Adserver before 5.1.0 is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the publicly accessible afr.php delivery script. While this issue was previously addressed in modern browsers as CVE-2020-8115, some older browsers (e.g., IE10) that do not automatically URL encode parameters were still vulnerable.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a https://github.com/revive-adserver/revive-adserver
Fixed in 5.1.0affected
References
- https://www.revive-adserver.com/security/revive-sa-2021-001/ ↗
- https://hackerone.com/reports/986365 ↗
- https://github.com/revive-adserver/revive-adserver/commit/00fdb8d0e ↗
- https://github.com/revive-adserver/revive-adserver/commit/1dbcf7d50 ↗
- http://seclists.org/fulldisclosure/2021/Jan/60 ↗
- http://packetstormsecurity.com/files/161070/Revive-Adserver-5.0.5-Cross-Site-Scripting-Open-Redirect.html ↗