High · published November 21, 2025
⚡ A logged-in attacker could easily change another user's email address—think of it as a sneaky impersonator sending you a new shipping address! Imagine a restaurant where anyone with a reservation can just ask the host to change the name on the table. If no one checks the identity of the guests, it could lead to someone taking over your spot and enjoying your meal without you even knowing! This vulnerability could lead to devastating account takeovers. An attacker could change email addresses and initiate a password reset, effectively locking legitimate users out of their accounts and gaining access to all their information. This means a potential breach of personal data and privacy!
Imagine a restaurant where anyone with a reservation can just ask the host to change the name on the table. If no one checks the identity of the guests, it could lead to someone taking over your spot and enjoying your meal without you even knowing! CVE-2025-48986 features an authorization bypass in Revive Adserver (versions 5.5.2, 6.0.1, and earlier) that allows authenticated users to alter other users' email addresses without proper permissions, paving the way for account takeovers via the password reset function.
This vulnerability could lead to devastating account takeovers. An attacker could change email addresses and initiate a password reset, effectively locking legitimate users out of their accounts and gaining access to all their information. This means a potential breach of personal data and privacy! Immediate action is needed! Upgrade Revive Adserver to version 6.0.2 or later to address this issue. Additionally, review user roles and permissions to ensure proper access controls are in place. Don't wait—act now to secure your accounts! You've got this! Follow these steps, and you’ll keep your accounts safe and sound. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| revive-adserver/revive_adserver | ≤ 5.5.2 | — |
| revive-adserver/revive_adserver | ≥ 6.0.0, ≤ 6.0.1 | — |