CVE-2025-52670

6.5 mediumEPSS 0.3%

Medium (6.5) in revive-adserver revive adserver. EPSS 0.3% chance of exploitation in the next 30 days.

Missing authorization check in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes users on the system to delete banners owned by other accounts

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWEs: CWE-639, CWE-862
Published: 2025-11-20
Modified: 2026-09-26
Record from: the NVD, synced 2026-10-19

Affected

revive-adserver:revive_adserver

References

https://hackerone.com/reports/3401612

Check your stack JSON