Description

Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PHP and database versions currently in use.

Remediation

References

CVE-2025-52671

Related Vulnerabilities

Oracle JRE CVE-2012-5086 Vulnerability (CVE-2012-5086)

Squid Improper Input Validation Vulnerability (CVE-2021-33620)

Drupal Core 8.5.x Cross-Site Scripting (8.5.0 - 8.5.1)

Squid Improper Input Validation Vulnerability (CVE-2020-8517)

MyBB Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-29458)

Severity

Medium

Classification

CVE-2025-52671 CWE-209 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities