CVE-2024-7887
LimeSurvey File Upload index.php denial of service
- State
- Published
- Severity
- 5.1 Medium
- Published
- Aug 17, 2024
- Updated
- Aug 19, 2024
- Reserved
- Aug 16, 2024
Description
A vulnerability was found in LimeSurvey 6.3.0-231016 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php of the component File Upload. The manipulation of the argument size leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.1 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 2.7 Low | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L | VulDB |
| 3.0 | 2.7 Low | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L | VulDB |
| 2.0 | 3.3 Low | AV:N/AC:L/Au:M/C:N/I:N/A:P | VulDB |
Weaknesses
- CWE-404 Denial of Service
Affected Products
| Product | Versions |
|---|---|
LimeSurveyn/a |
|
References
- VDB-274874 | LimeSurvey File Upload index.php denial of servicevdb-entrytechnical-description
- VDB-274874 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #387132 | LimeSurvey v6.3.0-231016 Improper Input Validationthird-party-advisory
- https://github.com/Hebing123/cve/issues/67exploitissue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.