Description

Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The Revive Adserver team conducted a security audit of the admin interface scripts in order to identify and fix other potential CSRF vulnerabilities. Over 20+ such issues were fixed.

Remediation

References

CVE-2016-9456

Related Vulnerabilities

Apache HTTP Server Other Vulnerability (CVE-2002-2029)

WordPress 4.3.x Denial of Service Vulnerability (4.3 - 4.3.15)

WordPress Plugin SendGrid Cross-Site Scripting (1.10.7)

WordPress Plugin Elementor Pro Security Bypass (3.11.6)

WordPress 2.2 Cross-Site Scripting Vulnerability (2.2)

Severity

High

Classification

CVE-2016-9456 CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities