Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
ReviveAdserver URL Redirection to Untrusted Site (Open Redirect) Vulnerability - CVE-2020-8143 - Vulnerability Database
ReviveAdserver

ReviveAdserver URL Redirection to Untrusted Site (Open Redirect) Vulnerability - CVE-2020-8143

Medium
Reference: CVE-2020-8143
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-8143
Title: ReviveAdserver URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Overview:

An Open Redirect vulnerability was discovered in Revive Adserver version lt 5.0.5 and reported by HackerOne user hoangn144. A remote attacker could trick logged-in users to open a specifically crafted link and have them redirected to any destination.The CSRF protection of the /www/admin/-modify.php could be skipped if no meaningful parameter was sent. No action was performed but the user was still redirected to the target page specified via the returnurl GET parameter.