← All advisories

Critical severity9.8NVD Advisory· Published Apr 1, 2020· Updated Jun 17, 2026

CVE-2020-11455

CVE-2020-11455

Description

LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Limesurvey/Limesurvey4 versions
cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*range: <=4.1.11
- cpe:2.3:a:limesurvey:limesurvey:4.1.12:-:*:*:*:*:*:*
- cpe:2.3:a:limesurvey:limesurvey:4.1.12:200324:*:*:*:*:*:*
- (no CPE)range: <4.1.12+200324
LimeSurvey/LimeSurveydescription
osv-coords
pkg:bitnami/limesurvey
Range: < 4.1.12

Patches

Vulnerability mechanics

References

3

github.com/LimeSurvey/LimeSurvey/commit/daf50ebb16574badfb7ae0b8526ddc5871378f1bnvdPatchThird Party Advisory
packetstormsecurity.com/files/157112/LimeSurvey-4.1.11-Path-Traversal.htmlnvdExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/48297nvdExploitThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.