Vulnerability Description
HackerOne community member Kassem S.(kassem_s94) has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-52672, via several alternate techniques. Homoglyphs based impersonation has been independently reported by other HackerOne users, such as itz_hari_ and khoof.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Aquaplatform | Revive Adserver | >= 6.0.0, < 6.0.4 |
Related Weaknesses (CWE)
References
- https://hackerone.com/reports/3434156ExploitIssue TrackingThird Party Advisory
FAQ
What is CVE-2025-55129?
CVE-2025-55129 is a vulnerability with a CVSS score of 5.4 (MEDIUM). HackerOne community member Kassem S.(kassem_s94) has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-52672, via several alte...
How severe is CVE-2025-55129?
CVE-2025-55129 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-55129?
Check the references section above for vendor advisories and patch information. Affected products include: Aquaplatform Revive Adserver.