Server Resource Exhaustion Vulnerability in LimeSurvey by LimeSurvey Project
CVE-2025-41075

6.9MEDIUM

Key Information:

Vendor

Limesurvey

Status
Limesurvey
Vendor
CVE Published:
20 November 2025

Badges

👾 Exploit Exists📰 News Worthy

What is CVE-2025-41075?

A vulnerability in LimeSurvey 6.13.0 is present in the endpoint /optin, which induces infinite HTTP redirects upon direct access. This can be exploited by attackers to trigger a Denial of Service (DoS) condition, thereby exhausting server or client resources. The vulnerability's inherent inability to terminate the redirect loop may lead to significant service degradation or instability in web browsers.

Affected Version(s)

LimeSurvey 6.13.0

News Articles

favicon imagewiz.io

CVE-2025-41075 Impact, Exploitability, and Mitigation Steps | Wiz

Understand the critical aspects of CVE-2025-41075 with a detailed vulnerability assessment, exploitation potential, affected technologies, and remediation guidance.

3 weeks ago

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multip...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • 📰

    First article discovered by wiz.io

  • Vulnerability published

  • Vulnerability Reserved

Credit

Julen Garrido Estevez
JSON
.