| Package | Affected versions | Patched versions |
|---|---|---|
| revive adserver | ≥ 6.0.0, < 6.0.4 | 6.0.4 |
HackerOne community member Kassem S.(kassem_s94) has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-52672, via several alternate techniques. Homoglyphs based impersonation has been independently reported by other HackerOne users, such as itz_hari_ and khoof.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free