Test ID:	1.3.6.1.4.1.25623.1.0.152904
Category:	Denial of Service
Title:	LimeSurvey < 6.3.0 DoS Vulnerability
Summary:	LimeSurvey is prone to a denial of service (DoS); vulnerability.
Description:	Summary: LimeSurvey is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The vulnerability is associated with surveys published by administrators that include the 'file upload' option. During the survey submission process, users can upload files, and the system validates the size of uploaded files. However, proper input validation is not performed on the uploaded file size, enabling attackers to manipulate submitted data to bypass the expected handling of the system. Specifically, attackers can manipulate the submitted data and set the 'size' parameter to a non-integer value, such as a string. Due to the lack of appropriate input validation, the system fails to handle this non-integer value correctly, resulting in an error. This error renders administrators unable to access statistical results for the affected survey, as the system fails to correctly parse the input data. Affected Software/OS: LimeSurvey prior to version 6.3.0. Solution: Update to version 6.3.0 or later. CVSS Score: 3.3 CVSS Vector: AV:N/AC:L/Au:M/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-7887
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.