CNNVD-202511-2305 Information

CNNVD ID

CNNVD-202511-2305

CVE-2025-48987

  • CNNVD Published: 2025-11-20

Description (Chinese)

Revive Adserver是Revive Adserver团队的一套开源的广告管理系统。该系统提供广告投放、广告位管理、数据统计等功能。 Revive Adserver 5.5.2版本和6.0.1版本及之前版本存在安全漏洞,该漏洞源于输入中和不当,可能导致反射型跨站脚本攻击。

Description (English)

Revive Adserver is an open-source advertising management system for the Revive Adserver team. The system provides advertising, position management, data statistics, etc. There is a security loophole in Revive Adserver, Versions 5.5.2 and 6.0.1 and earlier versions, which stems from inaccuracies in the input and may lead to a cross-station script attack.

Hazard Level

High

Vulnerability Type

其他

Published

2025-11-20

Last Modified

2026-02-24

References

https://hackerone.com/reports/3399191

Patch

https://www.revive-adserver.com/download/

Share on: