CVE-2024-35048: Medium severity surveyking vulnerability
Published May 14, 2024
·Updated
An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password.
Affected Software
2 affected components
SurveyKing SurveyKing
SurveyKing SurveyKing=1.3.1
Event History
Jan 1, 1970
CVE Published
via MITRE·12:00 AM
May 14, 2024
CVE Published
via NVD·03:39 PM
Aug 2, 2024
Data Sourced
via MITRE·03:10 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-35048?
CVE-2024-35048 is considered a medium severity vulnerability as it allows for session replay attacks.
2
How do I fix CVE-2024-35048?
To fix CVE-2024-35048, upgrade to the latest version of SurveyKing that addresses this security issue.
3
What systems are affected by CVE-2024-35048?
CVE-2024-35048 affects SurveyKing version 1.3.1.
4
What type of attack does CVE-2024-35048 enable?
CVE-2024-35048 enables attackers to perform session replay attacks after a user changes their password.
5
Is CVE-2024-35048 easy to exploit?
The exploitability of CVE-2024-35048 depends on the attacker's access to session tokens, which can vary by implementation.