CVE-2025-52671

Medium · 4.3

CVSS

4.3

EPSS

0.4%

Published

Nov 20, 2025

CISA due date

—

The record

Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PHP and database versions currently in use.

Affected packages

Ecosystem	Package	Introduced	Fixed