Skip to content
OpenAdvisories
Low · 2.7 CVE-2025-52666 EUVD-2025-198351GHSA-78v8-2mcw-xgcf

Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an administrato…

Published Nov 20, 2025 · Updated Nov 20, 2025 · Assigned by hackerone

Vendor: Revive Product: Revive Adserver

Description

Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an administrator user to disable the admin user console due to a fatal PHP error.

Affected products

VendorProductAffectedFixed
Revive Revive Adserver 6.0.1 – ≤ 6.0.1, 5.5.2 – ≤ 5.5.2 6.0.2

References