Skip to content
OpenAdvisories
High · 7.1 CVE-2025-52670 EUVD-2025-198332GHSA-9pgh-m953-mhjq

Missing authorization check in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes users on the system to delete banners owned by o…

Published Nov 20, 2025 · Updated Dec 1, 2025 · Assigned by hackerone

Description

Missing authorization check in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes users on the system to delete banners owned by other accounts

Affected products

VendorProductAffectedFixed
Revive Revive Adserver 6 – ≤ 6.0.1, 5 – ≤ 5.5.2 6.0.2

References