| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 20569 | Bug reports | Statistics | public | 2026-06-19 17:46 | 2026-08-07 15:05 |
| Reporter | DenisChenu | Assigned To | c_schmitz | ||
| Priority | none | Severity | minor | ||
| Status | resolved | Resolution | fixed | ||
| Product Version | 7.0.x | ||||
| Summary | 20569: Invalid quartile for crypted data | ||||
| Description | If data is crypted : quartile of numeric question are false | ||||
| Steps To Reproduce | Steps to reproduceImport included survey Expected resultBoth have the same values for quartile OR no questile for crypted Actual resultDifferent value, and in soùme situation, really bad value (Seem my medium here) | ||||
| Tags | No tags attached. | ||||
| Bug heat | 4 | ||||
| Complete LimeSurvey version number (& build) | 7.0.2 | ||||
| I will donate to the project if issue is resolved | No | ||||
| Story point estimate | |||||
| Browser | not relevant | ||||
| Database type & version | not relevant | ||||
| Server OS (if known) | not relevant | ||||
| Webserver software & version (if known) | not relevant | ||||
| PHP Version | not relevant | ||||
 |
Found when work on Fixed issue #19645: [Security] Nonce re-use cryptology weakness The issue is here : https://github.com/LimeSurvey/LimeSurvey/blob/c3fc519a929c17d29c5781ba5941d6b516cce943/application/helpers/admin/statistics_helper.php#L4168 We order by crypted data. Then no real order. |
 |
Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=40123 |
