« Volver al listado

CVE-2025-52671

Estado: AnalizadaMedia (4.3)—

Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PHP and database versions currently in use.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Revive-adserver — Revive Adserver

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-52671",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-52671",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-11-20T21:41:33.086687Z"
        }
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "support@hackerone.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "support@hackerone.com",
      "affectedData": [
        {
          "vendor": "Revive",
          "product": "Revive Adserver",
          "versions": [
            {
              "status": "affected",
              "version": "6",
              "versionType": "semver",
              "lessThanOrEqual": "6.0.1"
            },
            {
              "status": "affected",
              "version": "5",
              "versionType": "semver",
              "lessThanOrEqual": "5.5.2"
            },
            {
              "status": "unaffected",
              "version": "6.0.2",
              "versionType": "semver",
              "lessThanOrEqual": "6.0.2"
            },
            {
              "status": "unaffected",
              "version": "5.5.3",
              "versionType": "semver",
              "lessThanOrEqual": "5.5.3"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-11-20T20:16:23.410",
  "references": [
    {
      "url": "https://hackerone.com/reports/3403450",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "source": "support@hackerone.com"
    },
    {
      "url": "https://hackerone.com/reports/3403450",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-209"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PHP and database versions currently in use."
    },
    {
      "lang": "es",
      "value": "La revelación de información de depuración en el mensaje de error SQL en Revive Adserver 5.5.2 y 6.0.1 y versiones anteriores provoca que los usuarios no administradores adquieran información sobre las versiones de software, PHP y base de datos actualmente en uso."
    }
  ],
  "lastModified": "2026-09-26T00:10:00.127",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:revive-adserver:revive_adserver:6.0.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9EF49CB0-886F-4AB3-8CBF-B7A8A7276DD9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "support@hackerone.com"
}