| Package | Affected versions | Patched versions |
|---|---|---|
| limesurvey | < 3.17.14 | 3.17.14 |
Limesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows attackers to access a cookie value via a client-side script.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free