← All advisories

Medium severity5.3NVD Advisory· Published Sep 9, 2019· Updated Jun 17, 2026

CVE-2019-16180

CVE-2019-16180

Description

Limesurvey before 3.17.14 allows remote attackers to bruteforce the login form and enumerate usernames when the LDAP authentication method is used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Limesurvey/Limesurvey2 versions
cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*range: <3.17.14
- (no CPE)range: <3.17.14
Limesurvey/Limesurveydescription

Patches

Vulnerability mechanics

References

2

github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371envdPatchRelease NotesThird Party Advisory
www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-releasednvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.