PatchTheCVEsurveyking vulnerabilities and fixes
Recent CVEs affecting surveyking, with upgrade or downgrade steps. 3 tracked.
surveyking has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-05-14. Highest priority: CVE-2024-35049 (score 55/100).
- CVE-2024-35050 HIGH 8.8 DOWNGRADE An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user th
- CVE-2024-35049 CRITICAL 9.1 DOWNGRADE SurveyKing v1.3.1 was discovered to keep users' sessions active after logout
- CVE-2024-35048 MEDIUM 4.3 DOWNGRADE An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their p
FAQ
How do I fix surveyking vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is surveyking being exploited right now?
None of the tracked surveyking CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which surveyking CVE should I patch first?
CVE-2024-35049 currently ranks highest (55/100): SurveyKing v1.3.1 was discovered to keep users' sessions active after logout.