PT-2025-47570 · Limesurvey · Limesurvey
CVE-2025-41075
·
Publicado
2025-11-20
·
Atualizado
2025-11-22
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
LimeSurvey version 6.13.0
Description
A flaw exists in LimeSurvey version 6.13.0 within the
/optin endpoint that results in infinite HTTP redirects when directly accessed. This can be leveraged to create a Denial of Service (DoS) attack by depleting server or client resources. The system fails to interrupt the redirect loop, potentially leading to service disruption or browser instability.Recommendations
Apply a fix to prevent infinite HTTP redirects in the
/optin endpoint.Exploit
Correção
DoS
Infinite Loop
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Limesurvey