NetSight
high8.8

CVE-2024-35050

An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin.

Impact

An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin.

Affected products

VendorProductAffected versions
SurveykingSurveyking
Version 1.3.1

Weakness classification

References