Description

In Limesurvey before 3.17.14, admin users can mark other users' notifications as read.

Remediation

References

CVE-2019-16181

Related Vulnerabilities

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-8994)

Sqlite Improper Input Validation Vulnerability (CVE-2016-6153)

WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (0.4.4)

WordPress Plugin YITH Color and Label Variations for WooCommerce Security Bypass (1.8.11)

WordPress Plugin Zlick Paywall Security Bypass (2.2.1)

Severity

Low

Classification

CVE-2019-16181 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Known Vulnerabilities