CVE-2025-34120: LimeSurvey 2.0+ - 2.06+ Unauthenticated Arbitrary File Download via Serialized Backup Payload
An unauthenticated file download vulnerability exists in LimeSurvey versions from 2.0+ up to and including 2.06+ Build 151014. The application fails to validate serialized input to the admin backup endpoint (index.php/admin/update/sa/backup), allowing attackers to specify arbitrary file paths using a crafted datasupdateinfo payload. The files are packaged in a ZIP archive and made available for download without authentication. This vulnerability can be exploited to read arbitrary files on the host system, including sensitive OS and configuration files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34120?
CVE-2025-34120 is assessed as a critical severity vulnerability due to its potential for unauthenticated file downloads.
How do I fix CVE-2025-34120?
To fix CVE-2025-34120, update LimeSurvey to a version higher than 2.06+ Build 151014 where the vulnerability has been addressed.
What versions of LimeSurvey are affected by CVE-2025-34120?
CVE-2025-34120 affects LimeSurvey versions from 2.0 up to and including 2.06+ Build 151014.
What type of vulnerability is CVE-2025-34120?
CVE-2025-34120 is an unauthenticated file download vulnerability that allows attackers to exploit input validation issues.
What are the risks associated with CVE-2025-34120?
The risks of CVE-2025-34120 include unauthorized access to sensitive files and potential data breaches due to the file download capability.