QwikSec

Security Database

CVE

CWE

Training

CVE-2025-34120

Published: Jul 16, 2025

Modified: Nov 19, 2025

PUBLISHED

Description

An unauthenticated file download vulnerability exists in LimeSurvey versions from 2.0+ up to and including 2.06+ Build 151014. The application fails to validate serialized input to the admin backup endpoint (`index.php/admin/update/sa/backup`), allowing attackers to specify arbitrary file paths using a crafted `datasupdateinfo` payload. The files are packaged in a ZIP archive and made available for download without authentication. This vulnerability can be exploited to read arbitrary files on the host system, including sensitive OS and configuration files.

Vendor	Product	Versions
LimeSurvey GmbH	LimeSurvey	affected `2.0+ - <= 2.06+ Build 151014`

Weaknesses (CWE)

References

https://web.archive.org/web/20210123073627/https://www.limesurvey.org/blog/22-security/136-limesurvey-security-advisory-10-2015

vendor-advisory

patch

https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-lime-survey/

third-party-advisory

technical-description

https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/admin/http/limesurvey_file_download.rb

exploit

https://packetstorm.news/files/id/180855

exploit

https://www.vulncheck.com/advisories/limesurvey-unauthenticated-arbitrary-file-download

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.