← CVE Intelligence

CVE-2025-52667

Revive / Revive Adserver PUBLISHED

Description (CNA)

Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier versions causes a stored XSS attack to be possible for a logged in manager user.

Affected (CNA)

Vendor / productVersions
Revive / Revive Adserveraffected 6 through 6.0.1; affected 5 through 5.5.2; unaffected 6.0.2 through 6.0.2; unaffected 5.5.3 through 5.5.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.