LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "4.1.11"
},
{
"introduced": "0"
},
{
"last_affected": "4.1.12-NA"
},
{
"introduced": "0"
},
{
"last_affected": "4.1.12-200324"
}
]
}