CVE-2024-35049: Critical severity surveyking vulnerability
Published May 14, 2024
·Updated
SurveyKing v1.3.1 was discovered to keep users' sessions active after logout. Related to an incomplete fix for CVE-2022-25590.
Affected Software
2 affected components
SurveyKing SurveyKing
SurveyKing SurveyKing=1.3.1
Event History
Jan 1, 1970
CVE Published
via MITRE·12:00 AM
May 14, 2024
CVE Published
via NVD·03:39 PM
Aug 2, 2024
Data Sourced
via MITRE·03:10 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-35049?
The severity of CVE-2024-35049 is classified as Medium due to the potential risk of session hijacking.
2
How do I fix CVE-2024-35049?
To fix CVE-2024-35049, ensure to implement proper session termination processes to invalidate user sessions upon logout.
3
What software is affected by CVE-2024-35049?
CVE-2024-35049 affects SurveyKing version 1.3.1.
4
What is the issue with session handling in CVE-2024-35049?
The issue with CVE-2024-35049 is that it keeps users' sessions active after they log out, leading to potential security risks.
5
Is CVE-2024-35049 related to any previous vulnerabilities?
Yes, CVE-2024-35049 is related to an incomplete fix for CVE-2022-25590 regarding session management.