HackerOne community member Kassem S.(kassem_s94) has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-52672, via several alternate techniques. Homoglyphs based impersonation has been independently reported by other HackerOne users, such as itz_hari_ and khoof.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Revive |
|
No data.
No data.
References
| Link | Providers |
|---|---|
| https://hackerone.com/reports/3434156 |
|
History
Tue, 02 Dec 2025 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-176 |
Tue, 02 Dec 2025 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 02 Dec 2025 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Revive
Revive adserver |
|
| Vendors & Products |
Revive
Revive adserver |
Tue, 02 Dec 2025 02:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | HackerOne community member Kassem S.(kassem_s94) has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-52672, via several alternate techniques. Homoglyphs based impersonation has been independently reported by other HackerOne users, such as itz_hari_ and khoof. | |
| References |
| |
| Metrics |
cvssV3_0
|
MITRE
Status: PUBLISHED
Assigner: hackerone
Published: 2025-12-02T01:42:06.085Z
Updated: 2025-12-02T18:28:26.884Z
Reserved: 2025-08-07T15:00:05.576Z
Link: CVE-2025-55129
Vulnrichment
Updated: 2025-12-02T14:43:26.572Z
NVD
Status : Awaiting Analysis
Published: 2025-12-02T02:15:46.987
Modified: 2025-12-02T19:15:50.060
Link: CVE-2025-55129
Redhat
No data.