Approved changes feed: RSS · Atom

cpe:2.3:a:limesurvey:limesurvey:3.0.0:beta3:*:*:*:*:*:*

part: a version: 3.0.0 update: beta3

VendorLimesurvey (058558a5-1346-5b98-8ad3-c39a3b7701da)
ProductLimesurvey (e555dd7a-ca09-5888-a27e-8eaf99617f4a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/limesurvey/limesurvey purl2cpe 2026-06-01 10:14:38.719422

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1000053 vulnerable 2026-06-08 05:10:25.368462 Details available
LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery (CSRF) vulnerability in Theme Uninstallation that can result in CSRF causing LimeSurvey admins to delete all their themes, rendering the website unusable. This attack appear to be exploitable via Simple HTML markup can be used to send a GET request to the affected endpoint.
Published: 2018-02-09T23:00:00.000Z
Updated: 2024-08-05T12:33:48.730Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.