Revive Adserver versions prior to 4.2.0 suffers from deserialization and open redirection vulnerabilities.