CVE-2024-7887

Summary

CVE-2024-7887 is a recently disclosed vulnerability that affects LimeSurvey 6.3.0-231016. This issue lies within the File Upload component's /index.php file and is classified as a denial-of-service (DoS) vulnerability. Manipulation of argument sizes can trigger this vulnerability, allowing an attacker to cause the system to become unavailable. The attack can be launched remotely, and the exploit has been made public, increasing the risk of its usage. Despite early disclosure, the vendor has not responded to attempts to address this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.