Vulnerabilities

TI-2024-23182 CVE-2024-35050 · GHSA-94jp-p24v-f62j

An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the…

HIGH 73

An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00705 Published 2024-05-13 No fix listed CWE-613

TI-2024-23181 CVE-2024-35049 · GHSA-mqpq-887p-5xgm

SurveyKing v1.3.1 was discovered to keep users' sessions active after logout.

HIGH 74

SurveyKing v1.3.1 was discovered to keep users' sessions active after logout.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0073 Published 2024-05-13 No fix listed CWE-613

TI-2024-23180 CVE-2024-35048 · GHSA-crf4-j4g9-p5f8

An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password.

MEDIUM 53

An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00416 Published 2024-05-13 No fix listed CWE-613

TI-2022-09182 CVE-2022-25590 · GHSA-xxrc-mppm-r6mw

SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing…

LOW 31

SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing attackers to login to the system and access data using the browser cache when the user exits the application.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01309 Published 2022-03-25 No fix listed CWE-613

Vulnerabilities

Filters

An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the…

SurveyKing v1.3.1 was discovered to keep users' sessions active after logout.

An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password.

SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing…