Security Advisory

CVE-2019-5433

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-05-06 16:51:54

Last updated 2024-08-04 19:54:53

Assigner hackerone

CVSS score not scored

State PUBLISHED

Description

A user having access to the UI of a Revive Adserver instance could be tricked into clicking on a specifically crafted admin account-switch.php URL that would eventually lead them to another (unsafe) domain, potentially used for stealing credentials or other phishing attacks. This vulnerability was addressed in version 4.2.0.

← Browse all CVEs View on cve.org ↗