CVE-2024-42901

A CSV injection vulnerability in Lime Survey v6.5.12 allows attackers to execute arbitrary code via uploading a crafted CSV file.

Score

CVSS 3.1 4.8 Medium

Status

Analyzed - cve@mitre.org

Published

2024-09-03

Last modified

2024-09-03

Weaknesses

CWE-79

Affected products

• Limesurvey (Limesurvey)

References

• https://github.com/LimeSurvey/LimeSurvey/pull/3884
• https://github.com/sysentr0py/CVEs/tree/main/CVE-2024-42901