CVE-2019-16186 - In Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions

HIGH

In Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions

Published Sep 9, 2019

7.2

HIGH

CVSS 3.1

EPSS 1.30%

In Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions.

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7003		Advisory
https://github.com/LimeSurvey/LimeSurvey/commit/5870fd1037058bc4e43cccf893b576c72293371e#diff-d539f3f8185667ee48db78e1bf65a3b4R49		x_refsource_MISCPatchRelease NotesThird Party Advisory
https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released		x_refsource_MISCRelease NotesVendor Advisory