Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-42903
6.5
MEDIUMCVSS v3
Published
September 3, 2024
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
A Host header injection vulnerability in the password reset function of LimeSurvey v.6.6.1+240806 and before allows attackers to send users a crafted password reset link that will direct victims to a malicious domain.
LimeSurvey/LimeSurvey
GitHub🔥 LimeSurvey – A powerful, open-source survey platform. A free alternative to SurveyMonkey, Typeform, Qualtrics, and Google Forms, making it simple to create online surveys and forms with unmatched flexibility.
GitHub🔥 LimeSurvey – A powerful, open-source survey platform. A free alternative to SurveyMonkey, Typeform, Qualtrics, and Google Forms, making it simple to create online surveys and forms with unmatched flexibility.<= 6.6.1\+240806NVD
LimeSurveyNuGet GalleryLight weight client for getting session key, listing surveys, activating surveys and adding responses
NuGet GalleryLight weight client for getting session key, listing surveys, activating surveys and adding responses<= 6.6.1\+240806NVD
RubyGems