CVE-2021-22873 Open redirect in https://github.com/revive-adserver/revive-adserver
Attackers can exploit open redirects in Revive Adserver delivery scripts to redirect users to malicious sites, bypassing security controls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-22873?
CVE-2021-22873 is a medium-severity vulnerability in Revive-Adserver Revive Adserver, published on 21 Jan 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Revive Adserver before 5.1.0 is vulnerable to open redirects via the `dest`, `oadest`, and/or `ct0` parameters of the lg.php and ck.php delivery scripts. Such open redirects had previously been available by design to allow third party ad servers to track such metrics when delivering ads. However, third party click tracking via redirects is not a viable option anymore, leading to such open redirect functionality being removed and reclassified as a vulnerability.
Weakness: CWE-601
Which versions are affected by CVE-2021-22873?
It affects 1 product.
Products include Revive-Adserver Revive Adserver.
How do I fix CVE-2021-22873?
No fix has been published for CVE-2021-22873 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-22873 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-22873 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Revive-Adserver Revive Adserver
- CVE-2016-9124 Security feature bypass in Revive Adserver All versions before 3.2.3
- CVE-2016-9125 Auth bypass in Revive Adserver All versions before 3.2.3
- CVE-2017-5830 Deserialization in n/a
- CVE-2016-9470 Other in Revive Adserver All versions before 3.2.5 and 4.0.0
- CVE-2026-50741 Code injection in Adserver
Sources
Also known as GHSA-8rwp-72pf-cq9g.