{"id":"CVE-2019-9960","details":"The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.","modified":"2026-05-16T04:02:06.399145931Z","published":"2019-03-24T01:29:00.213Z","database_specific":{},"references":[{"type":"FIX","url":"https://github.com/LimeSurvey/LimeSurvey/commit/1ed10d3c423187712b8f6a8cb2bc9d5cc3b2deb8"}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}