CVE-2024-35048

An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password...

CVE-2024-35049

SurveyKing v1.3.1 is affected by a session-management issue where users’ sessions remain active after logout, related to an incomplete fix for CVE-2022-25590. CVSSv3.1 base score 9.1 (CRITICAL) with network access, no privileges required, and no user interaction. Impact primarilyConfidentiality a...

CVE-2024-35049

SurveyKing v1.3.1 was discovered to keep users' sessions active after logout. Related to an incomplete fix for CVE-2022-25590...

CVE-2024-35048

CVE-2024-35048 affects SurveyKing v1.3.1, enabling a session replay attack after password changes. The CVSSv3.1 base score is 4.3 (Medium): Network vector, low privileges, no user interaction, with integrity impact Low. Exploitation status and concrete root cause are not detailed in the provided ...