SQL Injection Vulnerability in Revive Adserver by Revive Adserver
CVE-2025-52664

8.8HIGH

Key Information:

Vendor

Revive

Status
Revive Adserver
Vendor
CVE Published:
30 October 2025

What is CVE-2025-52664?

A SQL injection vulnerability in Revive Adserver version 6.0.0 can allow authenticated users to execute crafted payloads, potentially leading to unauthorized access to sensitive information or disruption of services. The vulnerability arises when the application improperly handles user input within SQL queries, making it crucial for organizations using this software to apply proper security measures.

Affected Version(s)

Revive Adserver 6.0.0

Revive Adserver 6.0.1

References

https://hackerone.com/reports/3395221

CVSS V3.0

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.