CVE-2025-55123_CVE-2025-55123

3.5 / 10

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Description

Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attacks to their own advertiser users.

Basic Information

ID CVE-2025-55123

Source hackerone

Published Nov 20, 2025 at 19:10

Modified Nov 20, 2025 at 21:40

Affected Product

Vendor Revive

Product Revive Adserver

Version 6

Affected Versions Revive Revive Adserver 6
Revive Revive Adserver 5

CWE Classification

CWE-79

References

hackerone.com /reports/3404968

{
    "lastseen": "",
    "description": "Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attacks to their own advertiser users.",
    "published": "2025-11-20T19:10:15.783Z",
    "modified": "2025-11-20T21:40:47.974Z",
    "type": "cve",
    "title": "CVE-2025-55123",
    "source": "hackerone",
    "references": "https://hackerone.com/reports/3404968",
    "id": "CVE-2025-55123",
    "bulletinFamily": "",
    "cwe": [
        "CWE-79"
    ],
    "cvelist": null,
    "sourceData": "Revive Revive Adserver 6\nRevive Revive Adserver 5",
    "sourceHref": "",
    "cvss": {
        "score": 3.5,
        "severity": "LOW",
        "vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
        "version": "3.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Revive Adserver",
    "version": "6",
    "vendor": "Revive",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}