← All advisories

Unrated severityOSV Advisory· Published Mar 24, 2019· Updated Aug 4, 2024

CVE-2019-9960

CVE-2019-9960

Description

The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Limesurvey/LimesurveyOSV2 versions
1.45a, 1.45a_2007-02-24, 1.50_2007-08-06, …+ 1 more
- (no CPE)range: 1.45a, 1.45a_2007-02-24, 1.50_2007-08-06, …
- (no CPE)range: <= 3.16.1+190225

Patches

Vulnerability mechanics

References

1

github.com/LimeSurvey/LimeSurvey/commit/1ed10d3c423187712b8f6a8cb2bc9d5cc3b2deb8mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.