CVE-2018-1000514

MEDIUM

LimeSurvey 3.0.0-beta.3+17110 - Cross-Site Request Forgery in Boxes

Title source: llm
STIX 2.1

Description

LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery (CSRF) vulnerability in Boxes that can result in CSRF admins to delete boxes. This vulnerability appears to have been fixed in 3.6.x.

References (2)

Core 2
Core References
Exploit, Issue Tracking, Vendor Advisory x_refsource_misc
https://bugs.limesurvey.org/view.php?id=13562
Issue Tracking, Patch, Vendor Advisory x_refsource_misc
https://bugs.limesurvey.org/plugin.php?page=Source/view&id=26925

Scores

CVSS v3 4.3
EPSS 0.0034
EPSS Percentile 26.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Details

CWE
CWE-352
Status published
Products (1)
limesurvey/limesurvey 3.0.0 beta.3\+17110
Published Jun 26, 2018
Tracked Since Feb 18, 2026