Lucene search

GoogleOSV:CVE-2018-16397

HistorySep 03, 2018 - 3:29 p.m.

CVE-2018-16397

2018-09-0315:29:00

Google

osv.dev

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

6.8 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

24.7%

JSON

In LimeSurvey before 3.14.7, an admin user can leverage a “file upload” question to read an arbitrary file,

CPENameOperatorVersion
limesurveyeq2.05_plus_141126
limesurveyeq2.51.4_160908
limesurveyeq1.92_plus_120704
limesurveyeq1.91_plus_2011-08-05
limesurveyeq1.86_2009-09-30
limesurveyeq2.00_plus_121120
limesurveyeq2.50_plus_160213
limesurveyeq2.50_plus_160503
limesurveyeq1.92_plus_120330
limesurveyeq2.50RC7_160121

Name	Operator	Version
limesurvey	eq	2.05_plus_141126
limesurvey	eq	2.51.4_160908
limesurvey	eq	1.92_plus_120704
limesurvey	eq	1.91_plus_2011-08-05
limesurvey	eq	1.86_2009-09-30
limesurvey	eq	2.00_plus_121120
limesurvey	eq	2.50_plus_160213
limesurvey	eq	2.50_plus_160503
limesurvey	eq	1.92_plus_120330
limesurvey	eq	2.50RC7_160121

Rows per page:

1-10 of 5411

References

github.com/LimeSurvey/LimeSurvey/blob/3be9b41e76826b57f5860d18d93b23f47d59d2e4/docs/release_notes.txt#L51

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

6.8 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

24.7%

JSON

Related for OSV:CVE-2018-16397