Revive Adserver Cross-Site Scripting Vulnerability in Manager Accounts

A stored cross-site scripting vulnerability has been identified in Revive Adserver versions through 6.0.1 and 5.5.2. This issue allows manager accounts to inject malicious scripts into the Banner Name field, which are then executed in the browsers of advertiser users with access to the banner. The vulnerability arises from improper input sanitization, enabling the execution of persistent JavaScript in the context of the victim's session.

Impact

Exploitation of this vulnerability allows for persistent cross-site scripting, where injected scripts are executed in the context of users with access to the affected banner.

Reproduction

To reproduce this vulnerability, create or edit a banner in Revive Adserver. Insert a script payload into the Name field and save the banner. The injected script will be executed in the browser of any user added to the banner under User Access.

Remediation

Revive Adserver is planning a security release to address this vulnerability. Users are advised to upgrade to the latest version after the release.