Threats tagged 'ghsa-5pqq-jrvh-h276'

Revive Adserver versions 5.5.2, 6.0.1, and earlier contain an authorization bypass vulnerability that allows a logged-in attacker to change other users' email addresses and potentially take over their accounts via the forgot password functionality.