CVE-2025-41074
BaseFortify
Publication date: 2025-11-20
Last updated on: 2025-11-21
Assigner: Spanish National Cybersecurity Institute, S.A. (INCIBE)
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| limesurvey | limesurvey | 6.13.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-835 | The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in LimeSurvey 6.13.0 occurs at the /optout endpoint, causing infinite HTTP redirects when accessed directly. This creates a redirect loop that the system cannot break, leading to potential Denial of Service (DoS) attacks by exhausting server or client resources.
How can this vulnerability impact me? :
The vulnerability can cause service degradation or browser instability due to the infinite redirect loop. It can be exploited to perform a Denial of Service (DoS) attack by exhausting server or client resources, potentially making the service unavailable or unstable.