What is GHSA-h857-j7g6-gpwf?

GHSA-h857-j7g6-gpwf is a security advisory published by GitHub Security Advisories with Medium severity. A CSRF vulnerability exists in the `zone-include.php` script in Revive Adserver 6.0.7. Linking...

Which CVE IDs does GHSA-h857-j7g6-gpwf cover?

GHSA-h857-j7g6-gpwf covers the following CVE IDs: CVE-2026-50743. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h857-j7g6-gpwf?

GHSA-h857-j7g6-gpwf has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-h857-j7g6-gpwfMediumCVSS 5.4

A CSRF vulnerability exists in the `zone-include.php` script in Revive Adserver 6.0.7. Linking...

Vendor

GitHub Security Advisories

Published

July 20, 2026

Last Modified

July 20, 2026

🔗 CVE IDs covered (1)

CVE-2026-50743 →

📋 Description

A CSRF vulnerability exists in the zone-include.php script in Revive Adserver 6.0.7. Linking and unlinking banners or campaigns to zones could be triggered via crafted GET or POST requests without any verification of the CSRF token, allowing an attacker to perform these actions on behalf of an authenticated administrator.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-50743
https://hackerone.com/reports/3781691
https://github.com/advisories/GHSA-h857-j7g6-gpwf