← Database

CVE-2025-41074

HIGH CVSS: 7.5 Published: 2025-11-20 Modified: 2026-06-17

Description

Vulnerability in LimeSurvey 6.13.0 in the endpoint /optout that causes infinite HTTP redirects when accessed directly. This behavior can be exploited to generate a Denegation of Service (DoS attack), by exhausting server or client resources. The system is unable to break the redirect loop, which can cause service degradation or browser instability.

Affected Platforms

Limesurvey Limesurvey

Weakness Type

CWE-835

References