LimeSurvey Infinite HTTP Redirects Vulnerability Leading to Denial-of-Service

An infinite HTTP redirect vulnerability has been identified in LimeSurvey version 6.13.0, specifically in the '/optin' endpoint. This vulnerability causes a redirect loop that the system cannot break, leading to a denial-of-service condition by exhausting server or client resources. The resulting service degradation can cause instability in web browsers.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by creating an infinite loop of HTTP redirects, which can exhaust server or client resources. This loop can degrade service performance or cause instability in web browsers.

Remediation

Users can upgrade to LimeSurvey version 6.15.0 to address this vulnerability.