{"id":"CVE-2025-48986","state":"PUBLISHED","title":"Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change other users' email address and potentialy take over their accoun","description":"Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change other users' email address and potentialy take over their accounts using the forgot password functionality.","publishedAt":"2025-11-20T19:11:36.449Z","updatedAt":"2025-11-20T21:38:49.611Z","severity":{"score":8.8,"label":"High","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"hackerone"},"assigner":"hackerone","products":["Revive Revive Adserver"],"affected":[{"vendor":"Revive","product":"Revive Adserver","versions":[{"version":"5","status":"affected","lessThanOrEqual":"5.5.2","versionType":"semver"},{"version":"5.5.3","status":"unaffected","lessThanOrEqual":"5.5.3","versionType":"semver"},{"version":"6.0.2","status":"unaffected","lessThanOrEqual":"6.0.2","versionType":"semver"},{"version":"6","status":"affected","lessThanOrEqual":"6.0.1","versionType":"semver"}]}],"references":["https://hackerone.com/reports/3398283"],"weaknesses":["CWE-284"],"ingestedAt":"2026-10-29T20:09:23.771Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/48xxx/CVE-2025-48986.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-48986","state":"PUBLISHED","datePublished":"2025-11-20T19:11:36.449Z","dateUpdated":"2025-11-20T21:38:49.611Z","assignerShortName":"hackerone","assignerOrgId":"36234546-b8fa-4601-9d6f-f4e334aa8ea1","dateReserved":"2025-05-29T15:00:04.775Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change other users' email address and potentialy take over their accounts using the forgot password functionality."}],"affected":[{"vendor":"Revive","product":"Revive Adserver","versions":[{"version":"5","status":"affected","lessThanOrEqual":"5.5.2","versionType":"semver"},{"version":"5.5.3","status":"unaffected","lessThanOrEqual":"5.5.3","versionType":"semver"},{"version":"6.0.2","status":"unaffected","lessThanOrEqual":"6.0.2","versionType":"semver"},{"version":"6","status":"affected","lessThanOrEqual":"6.0.1","versionType":"semver"}]}],"references":[{"url":"https://hackerone.com/reports/3398283"}],"metrics":[{"cvssV3_0":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH"}}],"providerMetadata":{"shortName":"hackerone","orgId":"36234546-b8fa-4601-9d6f-f4e334aa8ea1","dateUpdated":"2025-11-20T19:11:36.449Z"}},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://hackerone.com/reports/3398283","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-11-20T21:38:45.725279Z","id":"CVE-2025-48986","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","type":"CWE","lang":"en","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-11-20T21:38:49.611Z"}}]}}}