4 matches found
CVE-2026-129152
SurveyKing 1.12.0 through 1.13.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to submit survey responses because AnswerServiceImpl.saveAnswer skips login-required and survey password checks. Attackers can submit responses to protected surveys and set...
CVE-2026-129152
SurveyKing versions 1.12.0 through 1.13.2 are vulnerable to an authentication bypass via the saveAnswer response submission. The root cause is located in the AnswerServiceImpl.saveAnswer method, which fails to perform mandatory login and survey password checks. This allows unauthenticated attacke...
EUVD-2026-125614
SurveyKing 1.12.0 through 1.13.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to submit survey responses because AnswerServiceImpl.saveAnswer skips login-required and survey password checks. Attackers can submit responses to protected surveys and set...
CVE-2026-129152 SurveyKing 1.12.0 through 1.13.2 Authentication Bypass via saveAnswer Response Submission
SurveyKing 1.12.0 through 1.13.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to submit survey responses because AnswerServiceImpl.saveAnswer skips login-required and survey password checks. Attackers can submit responses to protected surveys and set...