CVE-2026-50739: Revive Adserver: güvenlik açığı

Açıklama (NVD)

A bypass for CVE‑2026‑34913 exists with proper ownership validation that had not been applied to the reverse operation of linking campaigns and trackers through the `tracker-campaigns.php` script in Revive Adserver 6.0.7 and earlier. As a result, a low‑privileged user could link their trackers to campaigns owned by other managers on the same instance, leading to inconsistent ownership relationships.

Özet bilgiler

Ürün

Revive-adserver Revive Adserver

CVSS v3.1

4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS

%0,49 (yüzdelik 42)

CWE

CWE-284

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• hackerone.com
• CWE-284