Open Redirect in Revive-Adserver Revive Adserver
CVE-2021-22873
Revive Adserver before 5.1.0 is vulnerable to open redirects via the `dest`, `oadest`, and/or `ct0` parameters of the lg.php and ck.php delivery scripts. Such open redirects had previously been available by design to allow third party ad servers to track such metrics when delivering ads. However, third party click tracking via redirects is not a viable option anymore, leading to such open redirect functionality being removed and reclassified as a vulnerability.
Vulnerability class: Open Redirect
EPSS: 0.696 (99.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.
Affected products
- Revive-adserver Revive_adserver
- N/a Https://github.com/revive-adserver/revive-adserver — versions Fixed in 5.1.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- support@hackerone.com (Exploit, Third Party Advisory, x_refsource_MISC)
- support@hackerone.com (x_refsource_MISC, Vendor Advisory)
- support@hackerone.com (Third Party Advisory, x_refsource_MISC, Issue Tracking)
- support@hackerone.com (mailing-list, x_refsource_FULLDISC, Mailing List, Third Party Advisory, Broken Link)
- support@hackerone.com (VDB Entry, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2021-22873?
- CVE-2021-22873 is a medium-severity vulnerability in Revive-Adserver Revive Adserver, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 6.1/10. Published 2021-01-26.
- How severe is CVE-2021-22873?
- Medium severity. CVSS v3 base score is 6.1 out of 10.
- Is CVE-2021-22873 known to be exploited?
- 9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.