CVE-2021-41123

MOYENNE 5.3CVE-2021-41123 · Published 04/10/2021 · updated 17/06/2026

En bref

CVE-2021-41123 est une vulnérabilité MOYENNE (CVSS 5.3) touchant survey solutions (mysurvey).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.88%, plus élevée que 59.3% des vulnérabilités.
Correctif : mettre à jour vers 21.09.1 ou plus récent.

Package	Affected versions	Patched versions
survey solutions mysurvey	`< 21.09.1`	`21.09.1`

Description

Survey Solutions is a survey management and data collection system. In affected versions the Headquarters application publishes /metrics endpoint available to any user. None of the survey answers are ever exposed, only the aggregate counters, including count of interviews, or count of assignments. Starting from version 21.09.1 the endpoint is turned off by default.

References

surveysolutions/surveysolutions commit 99e7e83 · Patch
surveysolutions/surveysolutions security advisory · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free