published March 24, 2019
⚠️ A sneaky relative path flaw is hiding in LimeSurvey! This could let an attacker access files they shouldn't. 🔥 Think of it like a delivery person who accidentally drops a package at the wrong address because they followed an incomplete set of directions — this vulnerability allows access to sensitive files without proper checks. An attacker could exploit this vulnerability to gain unauthorized access to files on the server, potentially exposing sensitive data or system configurations. While it’s not actively exploited, the risk of data leakage remains a concern that shouldn’t be ignored.
Think of it like a delivery person who accidentally drops a package at the wrong address because they followed an incomplete set of directions — this vulnerability allows access to sensitive files without proper checks. The vulnerability lies in the downloadZip function in application/controllers/admin/export.php, where it improperly handles relative paths, allowing potential directory traversal and unauthorized file access.
An attacker could exploit this vulnerability to gain unauthorized access to files on the server, potentially exposing sensitive data or system configurations. While it’s not actively exploited, the risk of data leakage remains a concern that shouldn’t be ignored. Update LimeSurvey to the latest version (3.17 or higher) to close this loophole. Also, review your server's file permissions to ensure sensitive data is not accessible through unintended paths. You've got this! With these steps, you’ll be well on your way to securing your LimeSurvey installation! 🛡️