Threats tagged 'ghsa-h452-8c52-gq69'

Revive Adserver versions 6.0.0 through 6.0.8 contain an authorization bypass vulnerability that allows an authenticated manager restricted to one agency to access or modify resources of another agency. This occurs due to global input registration prioritizing GET parameters over POST parameters, conflicting with administration forms that use POST. An attacker can supply differing object identifiers in GET and POST requests to bypass permission checks, enabling unauthorized cross-agency changes, campaign ownership reassignment, and disclosure of campaign and banner data. The issue was introduced in a specific commit and fixed in version 6.0.9 by restoring POST parameter precedence.