Login Request a demo
Medium severity · published Apr 3, 2020
CVE-2020-8143
An Open Redirect vulnerability was discovered in Revive Adserver version < 5.0.5 and reported by HackerOne user hoangn144
6.1
CVSS
70.4%
EPSS
No
On KEV
Description
An Open Redirect vulnerability was discovered in Revive Adserver version < 5.0.5 and reported by HackerOne user hoangn144. A remote attacker could trick logged-in users to open a specifically crafted link and have them redirected to any destination.The CSRF protection of the “/www/admin/*-modify.php” could be skipped if no meaningful parameter was sent. No action was performed, but the user was still redirected to the target page, specified via the “returnurl” GET parameter.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)70.4% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Revive Adserver · Revive-adserver
before 5.0.5 · source: NVD
Affected product
RA
Revive Adserver
Revive-adserver
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-8143
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-8143
Exploit
https://hackerone.com/reports/794144
Vendor Advisory
https://www.revive-adserver.com/security/revive-sa-2020-002/
More from Revive Adserver
9.8
CVE-2016-9125
Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session identifiers to be forced and, at the same time, by not invalidating the existing session…
9.8
CVE-2016-9124
Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts
9.8
CVE-2017-5830
Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies related to the delivery scripts
9.0
CVE-2016-9470
Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download
8.8
CVE-2026-50741
Bypass to the fix for CVE-2026-34916