VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Apr 3, 2020· Updated Jun 17, 2026

CVE-2020-8143

CVE-2020-8143

Description

An Open Redirect vulnerability was discovered in Revive Adserver version < 5.0.5 and reported by HackerOne user hoangn144. A remote attacker could trick logged-in users to open a specifically crafted link and have them redirected to any destination.The CSRF protection of the “/www/admin/*-modify.php” could be skipped if no meaningful parameter was sent. No action was performed, but the user was still redirected to the target page, specified via the “returnurl” GET parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Revive Adserver/Adserver2 versions
    cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*range: <5.0.5
    • (no CPE)range: <5.0.5
  • Revive Adserver/Revive Adserverdescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.