medium5.4
CVE-2025-52667
Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier versions causes a stored XSS attack to be possible for a logged in …
Impact
Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier versions causes a stored XSS attack to be possible for a logged in manager user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Revive-Adserver | Revive Adserver | through 5.5.2 from 6.0.0 through 6.0.1 |