CVE-2025-56422

A deserialization vulnerability in LimeSurvey before v6.15.0+250623 allows a remote attacker to execute arbitrary code on the server...

CVE-2025-56422

The open-source online survey tool LimeSurvey is vulnerable to a deserialization of untrusted data vulnerability (CWE-502) in versions prior to v6.15.0+250623 . The root cause resides in the decodeTokenAttributes helper, where the application fails to sufficiently verify serialized token attribut...