Description

An XML injection vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to import specially crafted XML files and execute code or compromise data integrity.

Remediation

References

CVE-2019-16174

Related Vulnerabilities

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3991)

VMware directory traversal and privilege escalation vulnerabilities

MongoDb Improper Input Validation Vulnerability (CVE-2021-20330)

WordPress Plugin Resize Image After Upload Cross-Site Request Forgery (1.8.5)

WordPress Plugin Widgets for WooCommerce Products on Elementor Security Bypass (1.0.5)

Severity

High

Classification

CVE-2019-16174 CWE-611 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities