# CVE-2025-52671: Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions…

Source: https://junglewise.ai/threats/cve-2025-52671-debug-information-disclosure-in-the-sql-error-message-to-in  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-11-20  
License: CC BY 4.0 with a link back

CVE-2025-52671 · Severity: medium · CVSS 4.3 · Published 2025-11-20

Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PHP and database versions currently in use.

Technologies: [Revive-Adserver Revive Adserver](https://junglewise.ai/threats/technologies/adserver). Vendors: [Revive-Adserver](https://junglewise.ai/threats/vendors/revive-adserver).

## Quick answers

**Is CVE-2025-52671 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-52671 being exploited in the wild.

**How severe is CVE-2025-52671?** Medium severity, with a CVSS score of 4.3, published 20 November 2025.

**Which products and versions are affected?** Revive-Adserver Revive Adserver. The advisory does not name versions.

**Is there a fix for CVE-2025-52671?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-52671?** Check whether you run Revive-Adserver Revive Adserver. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Revive-Adserver Revive Adserver

## Related threats

- [Revive Adserver stored cross-site scripting in maintenance page](https://junglewise.ai/threats/cve-2026-108562-a-stored-cross-site-scripting-vulnerability-in-maintenance)
- [Revive Adserver reflected cross-site scripting in iframe invocation](https://junglewise.ai/threats/cve-2026-108559-a-reflected-cross-site-scripting-vulnerability-in-the-iframe)
- [Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script.](https://junglewise.ai/threats/cve-2025-55124-improper-neutralisation-of-input-in-revive-adserver-6-0-0-causes)
- [Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be…](https://junglewise.ai/threats/cve-2025-55123-improper-neutralization-of-input-in-revive-adserver-5-5-2-and-6-0)
- [SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when specifically crafted…](https://junglewise.ai/threats/cve-2025-52664-sql-injection-in-revive-adserver-6-0-0-causes-potential)