Cross-site scripting (XSS) vulnerability in Revive Adserver before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the user's email address.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2017/02/02/3 | Mailing List Third Party Advisory |
http://www.securityfocus.com/bid/95875 | |
https://www.revive-adserver.com/security/revive-sa-2017-001/ | Patch Vendor Advisory |
Configurations
History
No history.
Information
Published : 2017-03-03 15:59
Updated : 2024-02-04 19:11
NVD link : CVE-2017-5832
Mitre link : CVE-2017-5832
CVE.ORG link : CVE-2017-5832
JSON object : View
Products Affected
revive-adserver
- revive_adserver
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')