Description

A path disclosure vulnerability was found in Limesurvey before 3.17.14 that allows a remote attacker to discover the path to the application in the filesystem.

Remediation

References

CVE-2019-16176

Related Vulnerabilities

WordPress Plugin Event Tickets CSV Injection (4.10.7.1)

WordPress Plugin Attachment Manager Arbitrary File Upload (2.1.1)

WordPress Plugin Subscribe To Comments Reloaded Multiple Vulnerabilities (140204)

WordPress Plugin SyntaxHighlighter Evolved Cross-Site Scripting (3.1.5)

Joomla! Core 3.x.x Information Disclosure (3.4.0 - 3.6.5)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CVE-2019-16176