Surveyking
Surveyking: vulnerabilidades y CVE
Surveyking tiene 4 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-35050 | Alta (8.8) | 0.70% | — | 14 may 2024 | An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin. |
| CVE-2024-35049 | Crítica (9.1) | 0.73% | — | 14 may 2024 | SurveyKing v1.3.1 was discovered to keep users' sessions active after logout. Related to an incomplete fix for CVE-2022-25590. |
| CVE-2024-35048 | Media (4.3) | 0.42% | — | 14 may 2024 | An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password. |
| CVE-2022-25590 | Media (6.5) | 1.3% | — | 25 mar 2022 | SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing attackers to login to the system and access data using the browser cache when the user exits the application. |