Revive Adserver before 3.2.2 does not restrict access to run-mpe.php, which allows remote attackers to run the Maintenance Priority Engine and possibly cause a denial of service (resource consumption) via a direct request.
| Software | From | Fixed in |
|---|---|---|
| revive-adserver / revive_adserver | - | 3.2.1.x |