CVE-2022-25590: Medium severity SurveyKing SurveyKing vulnerability
Published Mar 25, 2022
·Updated
SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing attackers to login to the system and access data using the browser cache when the user exits the application.
Affected Software
1 affected component
SurveyKing SurveyKing=0.2.0
Event History
Mar 25, 2022
CVE Published
via MITRE·06:50 PM
Data Sourced
via MITRE·06:50 PM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-25590?
The severity of CVE-2022-25590 is classified as medium with a score of 6.5.
2
What does CVE-2022-25590 exploit?
CVE-2022-25590 exploits the retention of users' session cookies after logout in SurveyKing v0.2.0.
3
How can I fix CVE-2022-25590?
To fix CVE-2022-25590, update to the latest version of SurveyKing that addresses the session cookie retention issue.
4
What are the potential impacts of CVE-2022-25590?
The potential impacts of CVE-2022-25590 include unauthorized access to user data by attackers using stored session cookies.
5
Is there a workaround for CVE-2022-25590?
A temporary workaround for CVE-2022-25590 is to clear the browser cache and cookies after logging out of SurveyKing.