CVE-2026-63107 | LimeSurvey through 6.17.10 and 7.0.4 contains a server-side … | CVSS 7.7 HIGH

Description

LimeSurvey through 6.17.10 and 7.0.4 contains a server-side request forgery vulnerability in the REST API survey template endpoint that allows authenticated users to cause the server to issue arbitrary HTTP requests by supplying a manipulated Host header. Attackers can exploit the unsanitized use of the HTTP Host header in the getTemplateData() function to reach internal network services, cloud metadata endpoints, and extract sensitive credentials such as IAM tokens from instance metadata services.

Metadata

CVE ID: CVE-2026-63107
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2026-07-15 15:45 UTC
Published: 2026-07-20 18:14 UTC
Last updated: 2026-07-20 18:14 UTC
Primary CWE: CWE-918
Server-Side Request Forgery (SSRF)
Vendor / Product: LimeSurvey / LimeSurvey
Sources: cve.org · NVD

Severity & Metrics

7.7 HIGH CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products (1)

Vendor	Product	Platform	Versions
LimeSurvey	LimeSurvey	—	0 ≤ 6.17.10, 0 ≤ 7.0.4

Weakness (CWE)

CWE	Source	Description
CWE-918	cna	Server-Side Request Forgery (SSRF)

CVSS scores (2)

Score	Severity	Version	Source	Vector
7.7	HIGH	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
6.3	MEDIUM	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N

References (2)