CVE-2016-9127

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 3.2.3

Description The password recovery form in Revive Adserver is susceptible to Cross-Site Request Forgery (CSRF) attacks. This issue could be exploited to send a large number of password recovery emails to registered users.

Recommendations For versions prior to 3.2.3, update to version 3.2.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the password recovery form to minimize the risk of exploitation.