3 matches found
CVE-2024-35050
An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin...
7.1AI score0.00705EPSS
SaveExploits1References1
CVE-2024-35050
A security vulnerability exists in SurveyKing v1.3.1 , where an attacker can escalate privileges by reusing a session ID belonging to a user who was previously deleted by an administrator. This flaw is attributed to insufficient session expiration (CWE-613). The vulnerability allows for high impa...
8.8CVSS7AI score0.00705EPSS
SaveExploits1References1Affected Software1
20