| Package | Affected versions | Patched versions |
|---|---|---|
| limesurvey | ≤ 3.16.1\+190225 |
The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free