← All advisories

Medium severity4.9OSV Advisory· Published Sep 3, 2018· Updated Jun 17, 2026

CVE-2018-16397

CVE-2018-16397

Description

In LimeSurvey before 3.14.7, an admin user can leverage a "file upload" question to read an arbitrary file,

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Limesurvey/LimesurveyOSV2 versions
1.45a, 1.45a_2007-02-24, 1.50_2007-08-06, …+ 1 more
- (no CPE)range: 1.45a, 1.45a_2007-02-24, 1.50_2007-08-06, …
- (no CPE)range: <3.14.7

Patches

Vulnerability mechanics

References

1

github.com/LimeSurvey/LimeSurvey/blob/3be9b41e76826b57f5860d18d93b23f47d59d2e4/docs/release_notes.txtnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.