.. / CVE-2021-22873

• Open Redirect
• Nuclei
• Web

Exploit for Revive Adserver <5.1.0 - Open Redirect (CVE-2021-22873)

Description:

Revive Adserver before 5.1.0 contains an open redirect vulnerability via the dest, oadest, and ct0 parameters of the lg.php and ck.php delivery scripts. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

Nuclei Template

View the template here CVE-2021-22873.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-22873.yaml

References: