Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-16184
9.8
CRITICALCVSS v3
Published
September 9, 2019
CVSS v2
7.5 HIGH
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands via their survey responses that will be included in the export CSV file.
LimeSurvey/LimeSurvey
GitHub🔥 LimeSurvey – A powerful, open-source survey platform. A free alternative to SurveyMonkey, Typeform, Qualtrics, and Google Forms, making it simple to create online surveys and forms with unmatched flexibility.
GitHub🔥 LimeSurvey – A powerful, open-source survey platform. A free alternative to SurveyMonkey, Typeform, Qualtrics, and Google Forms, making it simple to create online surveys and forms with unmatched flexibility.< 3.17.14NVD
LimeSurveyNuGet GalleryLight weight client for getting session key, listing surveys, activating surveys and adding responses
NuGet GalleryLight weight client for getting session key, listing surveys, activating surveys and adding responses< 3.17.14NVD
RubyGems