Open Redirect in Https://github.com/revive-adserver/revive-adserver
CVE-2021-22873
Revive Adserver before 5.1.0 is vulnerable to open redirects via the `dest`, `oadest`, and/or `ct0` parameters of the lg.php and ck.php delivery scripts. Such open redirects had previously been available by design to allow third party ad s…
Vulnerability class: Open Redirect
EPSS: 0.660 (99.2th percentile) — read the EPSS interpretation.
Affected products
- N/a Https://github.com/revive-adserver/revive-adserver — versions Fixed in 5.1.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- hackerone.com/reports/1081406 (x_refsource_MISC)
- www.revive-adserver.com/security/revive-sa-2021-001/ (x_refsource_MISC)
- github.com/revive-adserver/revive-adserver/issues/1068 (x_refsource_MISC)
- 20210122 [REVIVE-SA-2021-001] Revive Adserver Vulnerabilities (mailing-list, x_refsource_FULLDISC)
- packetstormsecurity.com/files/161070/Revive-Adserver-5.0.5-Cross-Site-Scripting… (x_refsource_MISC)
Frequently asked questions
- What is CVE-2021-22873?
- CVE-2021-22873 is a vulnerability in Https://github.com/revive-adserver/revive-adserver, classified under URL Redirection to Untrusted Site (Open Redirect). Published 2021-01-21.
- Is CVE-2021-22873 known to be exploited?
- 9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.