CVE-2020-8115
mediumpriority · track · 26EPSS 0.070 · 94 %ileEUUSEPSS · scored 2026-10-27
A reflected XSS vulnerability has been discovered in the publicly accessible afr.php delivery script of Revive Adserver <= 5.0.3 by Jacopo Tediosi. There are currently no known exploits: the session identifier cannot be accessed as it is stored in an http-only cookie as of v3.2.2. On older versions, however, under specific circumstances, it could be possible to steal the session identifier and gain access to the admin interface. The query string sent to the www/delivery/afr.php script was printed back without proper escaping in a JavaScript context, allowing an attacker to execute arbitrary JS code on the browser of the victim.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (2)
Products and version ranges known to be affected.
- revive-adserver revive adserver≤ 5.0.3nvdUScpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (7)
External citations — patches, advisories, analysis.
- https://hackerone.com/reports/775693cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-8115cnnvd
- https://www.revive-adserver.com/security/revive-sa-2020-001/cnnvd
- https://hackerone.com/reports/775693enisa_euvd
- https://www.revive-adserver.com/security/revive-sa-2020-001/enisa_euvd
- https://hackerone.com/reports/775693ExploitPatchThird Party Advisorynvd
- https://www.revive-adserver.com/security/revive-sa-2020-001/Vendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan