high7.2
CVE-2019-16186
In Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions.
Impact
In Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Limesurvey | Limesurvey | before 3.17.14 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371e#diff-d539f3f8185667ee48db78e1bf65a3b4R49
- https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released
- https://github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371e#diff-d539f3f8185667ee48db78e1bf65a3b4R49
- https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released