CVE-2019-9960

Summary: 
The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.
Published: 
Saturday, March 23, 2019 - 21:29
cvss: