CVE-2024-35050

An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin...

CVE-2024-35050

An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin...

CVE-2024-35050

CVE-2024-35050 concerns SurveyKing v1.3.1, where an attacker can escalate privileges by re-using a session ID belonging to a user that Admin has deleted. The Red Hat/PT security entries corroborate the same issue and specify SurveyKing 1.3.1 as affected. A practical workaround suggested in PT-202...