A path disclosure vulnerability was found in Limesurvey before 3.17.14 that allows a remote attacker to discover the path to the application in the filesystem.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-16176.json"