Description
The default Flash cross-domain policy (crossdomain.xml) in Revive Adserver before 3.2.2 does not restrict access cross domain access, which allows remote attackers to conduct cross domain attacks via unspecified vectors.
Remediation
References
Related Vulnerabilities
PrestaShop CVE-2024-34717 Vulnerability (CVE-2024-34717)
Sqlite NULL Pointer Dereference Vulnerability (CVE-2020-13632)
WebLogic Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2021-2351)
MySQL CVE-2019-2502 Vulnerability (CVE-2019-2502)
WordPress Plugin Ultimate WordPress Auction Multiple Vulnerabilities (4.0.5)