Skip to content
OpenAdvisories

Vendor

LimeSurvey

23 known vulnerabilities.

Products

LimeSurvey 21 LimeSurvey Community Edition 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2025-34120 Public exploit

    LimeSurvey 2.0+ - 2.06+ Unauthenticated Arbitrary File Download via Serialized Backup Payload

    An unauthenticated file download vulnerability exists in LimeSurvey versions from 2.0+ up to and including 2.06+ Build 151014. The application fails to validate serialized input to the admin backup endpoint (`index.php/admin/update/sa/backup`), allowing attac…

    LimeSurvey LimeSurvey