CVE-2020-8143

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An Open Redirect vulnerability was discovered in Revive Adserver version < 5.0.5 and reported by HackerOne user hoangn144. A remote attacker could trick logged-in users to open a specifically crafted link and have them redirected to any destination.The CSRF protection of the “/www/admin/*-modify.php” could be skipped if no meaningful parameter was sent. No action was performed, but the user was still redirected to the target page, specified via the “returnurl” GET parameter.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

Vendor	Product	Versions
n/a	https://github.com/revive-adserver/revive-adserver	Fixed in >= 5.0.5

References

https://hackerone.com/reports/794144Exploit, Third Party Advisory
https://www.revive-adserver.com/security/revive-sa-2020-002/Vendor Advisory
https://hackerone.com/reports/794144Exploit, Third Party Advisory
https://www.revive-adserver.com/security/revive-sa-2020-002/Vendor Advisory

Timeline

Published: Apr 3, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-81448.4The UniFi Video Server v3.9.3 and prior (for Windows 7/8/10 x64) web interface Firmware Update functionality, under certain circumstances, d CVE-2020-81456.5The UniFi Video Server (Windows) web interface configuration restore functionality at the “backup” and “wizard” endpoints does not implement CVE-2020-81467.8In UniFi Video v3.10.1 (for Windows 7/8/10 x64) there is a Local Privileges Escalation to SYSTEM from arbitrary file deletion and DLL hijack CVE-2020-81479.8Flaw in input validation in npm package utils-extend version 1.0.8 and earlier may allow prototype pollution attack that may result in remot CVE-2020-81485.3UniFi Cloud Key firmware < 1.1.6 contains a vulnerability that enables an attacker being able to change a device hostname by sending a malic CVE-2020-81499.8Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.CVE-2020-81504.1A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the integrity of encrypted CVE-2020-81517.5There is a possible information disclosure issue in Active Resource <v5.1.1 that could allow an attacker to create specially crafted request CVE-2020-81524.4Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the public key to decry CVE-2020-81538.1Improper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when renaming an accessible item to the same nam CVE-2020-81547.7An Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker to remote wipe devices of other users when CVE-2020-81555.4An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a