XSS in Revive-Adserver Revive Adserver
CVE-2016-9126
Revive Adserver before 3.2.3 suffers from persistent XSS. Usernames are not properly escaped when displayed in the audit trail widget of the dashboard upon login, allowing persistent XSS attacks. An authenticated user with enough privileges to create other users could exploit the vulnerability to access the administrator account.
Vulnerability class: XSS (Cross-Site Scripting)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.
EPSS exploit prediction
EPSS: 0.014 (72.2th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 72nd percentile — 72.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.014 · newest: 0.014 · change: 0.000
Affected products
- Revive-Adserver Revive Adserver
- Revive Adserver All Versions Before 3.2.3 — versions Revive Adserver All versions before 3.2.3
Weakness classification (CWE)
References
- github.com/revive-adserver/revive-adserver/commit/8d8c6df309ff5fde9dd4770abcd4e… (Patch, Third Party Advisory, Issue Tracking)
- www.revive-adserver.com/security/revive-sa-2016-001/ (Patch, Vendor Advisory)
- hackerone.com/reports/97073 (Permissions Required)
Frequently asked questions
- What is CVE-2016-9126?
- CVE-2016-9126 is a medium-severity vulnerability in Revive-Adserver Revive Adserver, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2017-03-28.
- How severe is CVE-2016-9126?
- Medium severity. CVSS v3 base score is 5.4 out of 10.