Login Request a demo
Low severity · published Mar 28, 2017
CVE-2016-9471
Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection
3.1
CVSS
1.4%
EPSS
No
On KEV
Description
Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't properly sanitised when creating users on a Revive Adserver instance. Especially, control characters were not filtered, allowing apparently identical usernames to co-exist in the system, due to the fact that such characters are normally ignored when an HTML page is displayed in a browser. The issue could have therefore been exploited for user spoofing, although elevated privileges are required to create users within Revive Adserver.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
High
Privileges
High
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Revive Adserver · Revive-adserver
through 3.2.4; 4.0.0 · source: NVD
Affected product
RA
Revive Adserver
Revive-adserver
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-9471
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-9471
Patch
https://github.com/revive-adserver/revive-adserver/commit/05b1eceb
Permissions Required
https://hackerone.com/reports/128181
Patch
https://www.revive-adserver.com/security/revive-sa-2016-002/
More from Revive Adserver
9.8
CVE-2016-9125
Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session identifiers to be forced and, at the same time, by not invalidating the existing session…
9.8
CVE-2016-9124
Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts
9.8
CVE-2017-5830
Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies related to the delivery scripts
9.0
CVE-2016-9470
Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download
8.8
CVE-2026-50741
Bypass to the fix for CVE-2026-34916