Approved changes feed: RSS · Atom

cpe:2.3:a:revive-adserver:revive_adserver:5.3.0:rc1:*:*:*:*:*:*

part: a version: 5.3.0 update: rc1

VendorRevive Adserver (089288dc-eb18-57d1-84e4-acc6b9700f8f)
ProductRevive Adserver (9d30695b-4619-5d6e-851a-51f3a660e4a6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/revive-adserver/revive-adserver purl2cpe 2026-06-01 10:15:55.542822

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-22948 vulnerable 2026-06-08 05:30:02.012844 Details available
Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the cryptographically insecure uniqid() PHP function. Under some circumstances, an attacker could theoretically be able to brute force session IDs in order to take over a specific account.
Published: 2021-09-23T12:44:20.000Z
Updated: 2024-08-03T18:58:26.133Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.