Lucene search

K
osvGoogleOSV:CVE-2022-25590
HistoryMar 25, 2022 - 7:15 p.m.

CVE-2022-25590

2022-03-2519:15:10
Google
osv.dev
4
surveyking v0.2.0
session cookies
unauthorized access
browser cache
data access

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

52.0%

SurveyKing v0.2.0 was discovered to retain users’ session cookies after logout, allowing attackers to login to the system and access data using the browser cache when the user exits the application.

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

52.0%

Related for OSV:CVE-2022-25590