CVE-2019-9960

Publication date

2019-03-24 00:27:05

Family

mitre

State

PUBLISHED

Description

The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.