Launchpad.net

CVE 2019-16185

In Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries without proper permissions.

See the CVE page on Mitre.org for more details.