← All advisories

Critical severity9.8OSV Advisory· Published Mar 24, 2019· Updated Jun 17, 2026

CVE-2019-9960

CVE-2019-9960

Description

The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Limesurvey/LimesurveyOSV3 versions
1.45a, 1.45a_2007-02-24, 1.50_2007-08-06, …+ 2 more
- (no CPE)range: 1.45a, 1.45a_2007-02-24, 1.50_2007-08-06, …
- cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*range: <=3.16.1\+190225
- (no CPE)range: <=3.16.1+190225

Patches

Vulnerability mechanics

References

1

github.com/LimeSurvey/LimeSurvey/commit/1ed10d3c423187712b8f6a8cb2bc9d5cc3b2deb8nvdPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.