The user can delete himself in limesurvey/limesurvey
Jun 14th 2023
Bypassing the conditional check leads to the user can delete himself.
Proof of Concept
Step 1: The user with id 18834 attempts to delete himself but encounter an error
Step 2: By using
userid=18834' instead of
userid=18834, the user was able to successfully delete himself
The user can delete himself, leading to potential misbehavior of the application.