TI-2024-23181 CVE-2024-35049 · GHSA-mqpq-887p-5xgm
SurveyKing v1.3.1 was discovered to keep users' sessions active after logout.
Priority HIGH 74
SurveyKing v1.3.1 was discovered to keep users' sessions active after logout.
Surveyking
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Surveyking records in CISA KEVNo Surveyking vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2024-23182 CVE-2024-35050 · GHSA-94jp-p24v-f62j
An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the…
Priority HIGH 73
An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin.
TI-2024-23180 CVE-2024-35048 · GHSA-crf4-j4g9-p5f8
An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password.
Priority MEDIUM 53
An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password.
TI-2022-09182 CVE-2022-25590 · GHSA-xxrc-mppm-r6mw
SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing…
Priority LOW 31
SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing attackers to login to the system and access data using the browser cache when the user exits the application.