Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-41074

Multiple vulnerabilities in Limesurvey

Description

Vulnerability in LimeSurvey 6.13.0 in the endpoint /optout that causes infinite HTTP redirects when accessed directly. This behavior can be exploited to generate a Denegation of Service (DoS attack), by exhausting server or client resources. The system is unable to break the redirect loop, which can cause service degradation or browser instability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LimeSurvey LimeSurvey

Default version status: unaffected

  • 6.13.0affected

References