CVE-2024-7887

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-7887

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-7887.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-7887

Published

2024-08-17T09:00:05.806Z

Modified

2026-07-15T01:48:55.098130874Z

Severity

5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

LimeSurvey File Upload index.php denial of service

Details

A vulnerability was found in LimeSurvey 6.3.0-231016 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php of the component File Upload. The manipulation of the argument size leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/7xxx/CVE-2024-7887.json",
    "cwe_ids": [
        "CWE-404"
    ],
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "6.3.0-231016"
                },
                {
                    "last_affected": "6.3.0-231016"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/limesurvey/limesurvey

Affected ranges

Type

GIT

Repo

https://github.com/limesurvey/limesurvey

Events

Introduced

e90f235a97ff2c0a59897079714e0e57fba483ae

Last affected

e90f235a97ff2c0a59897079714e0e57fba483ae

Database specific

{
    "cpe": "cpe:2.3:a:limesurvey:limesurvey:6.3.0:231016:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "6.3.0-231016"
        },
        {
            "last_affected": "6.3.0-231016"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

6.*

6.3.0+231016

6.3.0-231016

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-7887.json"