CVE-2024-42901

MEDIUM CVSS: 4.8 Published: 2024-09-03 Modified: 2026-06-17

Description

A CSV injection vulnerability in Lime Survey v6.5.12 allows attackers to execute arbitrary code via uploading a crafted CSV file.

Affected Platforms

Limesurvey Limesurvey

Weakness Type

CWE-79

References