CVE-2019-16181: Medium severity limesurvey vulnerability
Published Sep 9, 2019
·Updated
In Limesurvey before 3.17.14, admin users can mark other users' notifications as read.
Affected Software
1 affected component
Limesurvey LimeSurvey<3.17.14
Remediation
Event History
Sep 9, 2019
CVE Published
via MITRE·08:31 PM
Data Sourced
via MITRE·08:31 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this Limesurvey vulnerability?
The vulnerability ID for this Limesurvey vulnerability is CVE-2019-16181.
2
What is the severity of CVE-2019-16181?
The severity of CVE-2019-16181 is medium (2.7).
3
How does CVE-2019-16181 affect Limesurvey?
CVE-2019-16181 allows admin users in Limesurvey before version 3.17.14 to mark other users' notifications as read.
4
How can I fix CVE-2019-16181 in Limesurvey?
You can fix CVE-2019-16181 by upgrading Limesurvey to version 3.17.14 or later.
5
Where can I find more information about CVE-2019-16181?
You can find more information about CVE-2019-16181 at the following references: [Link 1](https://github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371e#diff-d539f3f8185667ee48db78e1bf65a3b4R52) and [Link 2](https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released).