← Database

CVE-2025-41075

HIGH CVSS: 7.5 Published: 2025-11-20 Modified: 2026-06-17

Description

Vulnerability in LimeSurvey 6.13.0 in the endpoint /optin that causes infinite HTTP redirects when accessed directly. This behavior can be exploited to generate a Denegation of Service (DoS attack), by exhausting server or client resources. The system is unable to break the redirect loop, which can cause service degradation or browser instability.

Affected Platforms

Limesurvey Limesurvey

Weakness Type

CWE-835

References