Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
ReviveAdserver URL Redirection to Untrusted Site (Open Redirect) Vulnerability - CVE-2021-22873 - Vulnerability Database
ReviveAdserver

ReviveAdserver URL Redirection to Untrusted Site (Open Redirect) Vulnerability - CVE-2021-22873

Medium
Reference: CVE-2021-22873
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-22873
Title: ReviveAdserver URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Overview:

Revive Adserver before 5.1.0 is vulnerable to open redirects via the dest oadest and/or ct0 parameters of the lg.php and ck.php delivery scripts. Such open redirects had previously been available by design to allow third party ad servers to track such metrics when delivering ads. However third party click tracking via redirects is not a viable option anymore leading to such open redirect functionality being removed and reclassified as a vulnerability.