Vulnerability · Published Mar 25, 2021 · Assigned by hackerone

CVE-2021-22889

Medium 6.1

In plain English

A medium-severity cross-site scripting in https://github.com/revive-adserver/revive-adserver. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 30.5% (higher than 98% of all known vulnerabilities).

Severity (CVSS NVD)6.1Medium

Exploit odds (30 days)30.5%top 1.8% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `statsBreakdown` parameter of stats.php (and possibly other scripts) due to single quotes not being escaped. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and pressing a certain key combination to execute injected JavaScript code.

Affected products (as reported)

Vendor	Product	Versions
n/a	https://github.com/revive-adserver/revive-adserver	Fixed in v5.2.0

Weakness: CWE-79

References

https://www.revive-adserver.com/security/revive-sa-2021-003/ x_refsource_MISC
https://hackerone.com/reports/1097217 x_refsource_MISC
https://github.com/revive-adserver/revive-adserver/commit/2f868414 x_refsource_MISC