The default Flash cross-domain policy (crossdomain.xml) in Revive Adserver before 3.2.2 does not restrict access cross domain access, which allows remote attackers to conduct cross domain attacks via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| revive-adserver / revive_adserver | - | 3.2.1.x |