Cross-Site Request Forgery Vulnerabilities in Revive Adserver by Remain Media
CVE-2015-7366

Currently unrated

Key Information:

Vendor: Revive-adserver
Status: Revive Adserver
Vendor: CVE Published:; 14 October 2015

🔔 Create Revive-adserver Vulnerability Alert

What is CVE-2015-7366?

Revive Adserver versions prior to 3.2.2 are susceptible to multiple cross-site request forgery vulnerabilities. Attackers can leverage these weaknesses to hijack user authentication, leading to unauthorized actions such as potential denial of service through the disabling of core plugins or altering user settings via crafted POST requests. It’s essential for users to upgrade to the latest version to mitigate these risks and maintain secure operations.

References

http://www.revive-adserver.com/security/revive-sa-2015-001

x_refsource_CONFIRM

http://www.securityfocus.com/archive/1/536633/100/0/threaded

mailing-listx_refsource_BUGTRAQ

http://seclists.org/fulldisclosure/2015/Oct/32

mailing-listx_refsource_FULLDISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 14, 2015
Vulnerability Reserved
Sep 25, 2015

CVE-2015-7366 Data

JSON