CVE-2025-48986 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change other users' email address and potentialy ta…
High CVSS: 8.8

CVE-2025-48986

Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change other users' email address and potentialy take over their accounts using the forgot password functionality.
Vendor
Revive-adserver
Product
Revive Adserver
CWE
CWE-284
Yayın Tarihi
2025-11-20 20:16:22
Güncelleme
2025-11-25 18:57:29
Source Identifier
support@hackerone.com
KEV Date Added
-

Kategoriler

CWE-284 Revive Adserver HIGH Revive-adserver 2025

Referanslar

https://hackerone.com/reports/3398283 https://hackerone.com/reports/3398283