Lucene search
HistoryMay 14, 2024 - 3:39 p.m.
CVE-2024-35049
surveyking
v1.3.1
logout issue
incomplete fix
cve-2022-25590
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
0.002
Percentile
52.0%
SurveyKing v1.3.1 was discovered to keep users’ sessions active after logout. Related to an incomplete fix for CVE-2022-25590.
Related
cvelist
cvelist
CVE-2024-35049
1976-01-01 00:00:00
CVE-2022-25590
2022-03-25 18:50:11
vulnrichment
vulnrichment
CVE-2024-35049
1976-01-01 00:00:00
cve
cve
CVE-2024-35049
2024-05-14 15:39:39
CVE-2022-25590
2022-03-25 19:15:10
nvd
nvd
CVE-2022-25590
2022-03-25 19:15:10
prion
prion
Design/Logic Flaw
2022-03-25 19:15:00
osv
osv
CVE-2022-25590
2022-03-25 19:15:10
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
0.002
Percentile
52.0%
Related for NVD:CVE-2024-35049