CVE-2019-5433

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2019-5433

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-5433.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2019-5433

Published

2019-05-06T17:29:00.620Z

Modified

2026-07-08T19:51:00.467862Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

A user having access to the UI of a Revive Adserver instance could be tricked into clicking on a specifically crafted admin account-switch.php URL that would eventually lead them to another (unsafe) domain, potentially used for stealing credentials or other phishing attacks. This vulnerability was addressed in version 4.2.0.

References

Affected packages

Git / github.com/revive-adserver/revive-adserver

Affected ranges

Type

GIT

Repo

https://github.com/revive-adserver/revive-adserver

Events

Introduced

Fixed

ed2ee13b2046cf2639417fa2d98687fee43e916e

Database specific

{
    "cpe": "cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.2.0"
        }
    ]
}

Affected versions

v3.*

v3.0.0

v3.0.1

v3.0.2

v3.0.3

v3.1.0

v3.1.0-beta

v3.2.0

v3.2.0-beta

v3.2.1

v3.2.1-rc1

v4.*

v4.0.0

v4.0.0-rc1

v4.0.1

v4.0.2

v4.1.0

v4.1.0-rc1

v4.1.2

v4.1.3

v4.1.4

v4.2.0-rc1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-5433.json"