CVE-2026-21641
HackerOne community member Jad Ghamloush (0xjad) has reported an authorization bypass vulnerability in the `tracker-delete.php` script of Revive Adser...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
HackerOne community member Jad Ghamloush (0xjad) has reported an authorization bypass vulnerability in the tracker-delete.php script of Revive Adserver. Users with permissions to delete trackers are mistakenly allowed to delete trackers owned by other accounts.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web hackerone.com