CVE-2025-41376
CRLF Injection vulnerability in Limesurvey v2.65.1+170522. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via '/index.php/survey/index/sid/<SID>/token/fwyfw%0d%0aCookie:%20POC'.
Vendor
Product
CWE
Yayın Tarihi
2025-08-01 13:15:27
Güncelleme
2026-01-30 21:44:53
Source Identifier
cve-coordination@incibe.es
KEV Date Added
-