CVE-2025-41074
Multiple vulnerabilities in Limesurvey
Summary
Multiple vulnerabilities in Limesurvey
Original description
The description as published by the source.
Vulnerability in LimeSurvey 6.13.0 in the endpoint /optout that causes infinite HTTP redirects when accessed directly. This behavior can be exploited to generate a Denegation of Service (DoS attack), by exhausting server or client resources. The system is unable to break the redirect loop, which can cause service degradation or browser instability.
References
- advisory github.com
- advisory nvd.nist.gov
- web incibe.es