Test Kennung:	1.3.6.1.4.1.25623.1.0.152904
Kategorie:	Denial of Service
Titel:	LimeSurvey < 6.3.0 DoS Vulnerability
Zusammenfassung:	LimeSurvey is prone to a denial of service (DoS); vulnerability.
Beschreibung:	Summary: LimeSurvey is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The vulnerability is associated with surveys published by administrators that include the 'file upload' option. During the survey submission process, users can upload files, and the system validates the size of uploaded files. However, proper input validation is not performed on the uploaded file size, enabling attackers to manipulate submitted data to bypass the expected handling of the system. Specifically, attackers can manipulate the submitted data and set the 'size' parameter to a non-integer value, such as a string. Due to the lack of appropriate input validation, the system fails to handle this non-integer value correctly, resulting in an error. This error renders administrators unable to access statistical results for the affected survey, as the system fails to correctly parse the input data. Affected Software/OS: LimeSurvey prior to version 6.3.0. Solution: Update to version 6.3.0 or later. CVSS Score: 3.3 CVSS Vector: AV:N/AC:L/Au:M/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2024-7887
Copyright	Copyright (C) 2024 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.