Threats tagged 'ghsa-5p98-2ff8-345c'

An authorization bypass vulnerability exists in channel-edit.php in Revive Adserver version 6.0.8 and earlier. This flaw allows an authenticated manager to create delivery rule sets for agencies other than their own by manipulating the agencyid parameter in the submitted form. The server improperly trusts the submitted agency identifier, enabling unauthorized creation of objects in another agency's account. The issue is resolved in version 6.0.9 by deriving the agency identifier from the authenticated user's account instead of the form data and removing the agency identifier from hidden form fields.