View Issue Details

Related ChangesetsJump to NotesJump to History
This issue affects 1 person(s).
 258
IDProjectCategoryView StatusDate SubmittedLast Update
20447Bug reportsSecuritypublic2026-03-04 17:522026-10-07 23:33
ReporterDenisChenu Assigned Togabrieljenik  
PrioritynoneSeverityminor 
Status closedResolutionfixed 
Product Version6.16.x 
Summary20447: Low security : uiser can set any existing theme when save survey
Description

When save survey : any theme can be set

Steps To Reproduce

Steps to reproduce

Create an user
Give him Create survey permission
No permission on theme (can only use inherit, default, and existing)
Log in as this user
Create a survey
Update survey settings; set vanilla (or other one for theme

Expected result

Error alert : no permission on this theme

Actual result

Theme saved

TagsNo tags attached.
Attached Files
Capture vidéo du 2026-03-04 17-51-21.mp4 (2,372,554 bytes)   
Capture vidéo du 2026-03-04 17-51-21.mp4 (2,372,554 bytes)   
Bug heat258
Complete LimeSurvey version number (& build)6.16.11
I will donate to the project if issue is resolvedNo
Browsernot relevant
Database type & versionnot relevant
Server OS (if known)not relevant
Webserver software & version (if known)not relevant
PHP Versionnot relevant
Git branch / Pull Request URLN/A

Users monitoring this issue

There are no users monitoring this issue.

Activities

gabrieljenik

gabrieljenik

2026-03-16 20:04

developer   ~84464

https://github.com/LimeSurvey/LimeSurvey/pull/4779
DenisChenu

DenisChenu

2026-03-17 08:06

developer   ~84465

Reset is $sTemplateName = $oSurvey->template;

:)
guest

guest

2026-10-07 12:57

viewer   ~86226

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=40686
LimeBot

LimeBot

2026-10-07 23:33

administrator   ~86243

Fixed in Release 7.5.1+261007

Related Changesets

LimeSurvey: master 04627eb4

2026-10-07 12:57

Gabriel Jenik

Committer: GitHub


Details Diff		 Fixed issue 20447: [security] User can set any existing theme when saving survey (04779)

Fixed issue 20447: [security] Missing permission enforcement when saving a survey's theme. Severity: Medium (CVSS 4.3, AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). An authenticated user with permission to edit their own survey's general settings, but no permission for a specific theme, could still apply that theme to their survey, Affects versions since 2015 (2.0x) through 7.1.2. Fixed in 7.1.3		 Affected Issues
20447
mod - application/models/Survey.php Diff File

Issue History

Date Modified Username Field Change
2026-03-04 17:52 DenisChenu New Issue
2026-03-04 17:52 DenisChenu File Added: Capture vidéo du 2026-03-04 17-51-21.mp4
2026-03-05 13:38 tibor.pacalat Assigned To => gabrieljenik
2026-03-05 13:38 tibor.pacalat Status new => assigned
2026-03-16 20:04 gabrieljenik Assigned To gabrieljenik => DenisChenu
2026-03-16 20:04 gabrieljenik Status assigned => ready for code review
2026-03-16 20:04 gabrieljenik Note Added: 84464
2026-03-16 20:04 gabrieljenik Bug heat 250 => 252
2026-03-17 08:06 DenisChenu Assigned To DenisChenu => gabrieljenik
2026-03-17 08:06 DenisChenu Status ready for code review => in code review
2026-03-17 08:06 DenisChenu Note Added: 84465
2026-03-17 08:06 DenisChenu Bug heat 252 => 254
2026-10-07 12:57 Changeset attached => LimeSurvey master 04627eb4
2026-10-07 12:57 guest Note Added: 86226
2026-10-07 12:57 guest Bug heat 254 => 256
2026-10-07 23:33 LimeBot Note Added: 86243
2026-10-07 23:33 LimeBot Status in code review => closed
2026-10-07 23:33 LimeBot Resolution open => fixed
2026-10-07 23:33 LimeBot Bug heat 256 => 258