CVE-2025-41075

High · 7.5

CVSS

7.5

EPSS

0.3%

Published

Nov 20, 2025

CISA due date

—

The record

Vulnerability in LimeSurvey 6.13.0 in the endpoint /optin that causes infinite HTTP redirects when accessed directly. This behavior can be exploited to generate a Denegation of Service (DoS attack), by exhausting server or client resources. The system is unable to break the redirect loop, which can cause service degradation or browser instability.

Affected packages

Ecosystem	Package	Introduced	Fixed
Bitnami	limesurvey	6.13.0	6.15.5

Related vulnerabilities

CVE-2025-41074 Vulnerability in LimeSurvey 6.13.0 in the endpoint /optout that causes infinite HTTP… Also affects limesurvey
CVE-2025-41076 In version 6.13.0 of LimeSurvey, any external user can cause a 500 error in the survey… Also affects limesurvey