Описание
The default Flash cross-domain policy (crossdomain.xml) in Revive Adserver before 3.2.2 does not restrict access cross domain access, which allows remote attackers to conduct cross domain attacks via unspecified vectors.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.2.1 (включая)
cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*
EPSS
Процентиль: 74%
0.00844
Низкий
7.5 High
CVSS2
Дефекты
CWE-284
Связанные уязвимости
github
больше 3 лет назад
The default Flash cross-domain policy (crossdomain.xml) in Revive Adserver before 3.2.2 does not restrict access cross domain access, which allows remote attackers to conduct cross domain attacks via unspecified vectors.
EPSS
Процентиль: 74%
0.00844
Низкий
7.5 High
CVSS2
Дефекты
CWE-284