CVE-2025-52670: High severity Revive Adserver Revive Adserver vulnerability
Published Nov 20, 2025
·Updated
Missing authorization check in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes users on the system to delete banners owned by other accounts
Affected Software
3 affected components
Revive Adserver Revive Adserver<=6.0.1
revive-adserver Revive Adserver<=5.5.2
revive-adserver Revive Adserver>=6.0.0<=6.0.1
Event History
Nov 20, 2025
CVE Published
via MITRE·07:10 PM
Data Sourced
via MITRE·07:10 PM
DescriptionSeverity
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-52670?
CVE-2025-52670 is classified as a high severity vulnerability due to its potential impact on data integrity.
2
How do I fix CVE-2025-52670?
To fix CVE-2025-52670, upgrade to Revive Adserver version 6.0.2 or later, which includes the necessary authorization checks.
3
What can attackers do with CVE-2025-52670?
Attackers exploiting CVE-2025-52670 can delete banners owned by other accounts, potentially disrupting advertising campaigns.
4
Which versions of Revive Adserver are affected by CVE-2025-52670?
CVE-2025-52670 affects Revive Adserver versions 5.5.2 and 6.0.1 and earlier.
5
Is there a workaround for CVE-2025-52670?
There are no known workarounds for CVE-2025-52670; the recommended action is to upgrade to the latest version.