CVE-2016-9127CWE-352

Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF)

published March 28, 2017

CVSS
—
EPSS
1%
Percentile
54.6
In the wild
Unconfirmed
What it is

Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The password recovery form in Revive Adserver is vulnerable to CSRF attacks. This vulnerability could be exploited to send a large number of password recovery emails to the registered users, especially in conjunction with a bug that caused recovery emails to be sent to all the users at once. Both issues have been fixed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00762 · 54.6th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2017-03-28T02:46Z
EPSS history
Timeline
  • 28 MAR 02:46Z
    Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF)
    cvelistv5