CVE-2019-16177: Infoleak
Published Sep 9, 2019
·Updated
In Limesurvey before 3.17.14, the entire database is exposed through browser caching.
Affected Software
1 affected component
Limesurvey LimeSurvey<3.17.14
Remediation
Event History
Sep 9, 2019
CVE Published
via MITRE·08:39 PM
Data Sourced
via MITRE·08:39 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-16177.
2
What is the severity level of CVE-2019-16177?
CVE-2019-16177 has a severity level of high.
3
How does CVE-2019-16177 affect Limesurvey?
CVE-2019-16177 exposes the entire database in Limesurvey versions before 3.17.14 through browser caching.
4
What is the recommended version of Limesurvey to fix CVE-2019-16177?
To fix CVE-2019-16177, you should upgrade to Limesurvey version 3.17.14 or later.
5
Where can I find more information about CVE-2019-16177?
More information about CVE-2019-16177 can be found at the following references: [Link 1](https://github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371e#diff-d539f3f8185667ee48db78e1bf65a3b4R53) and [Link 2](https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released).