Security Advisory

CVE-2019-9960

9.8
CRITICAL

Vulnerability Description

The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.
Published Date March 24, 2019
Official Source NIST NVD Advisory