CVEvulnerability
CVE-2022-25590
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-03-25
- Last modified
- 2026-07-09
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-613
Description
SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing attackers to login to the system and access data using the browser cache when the user exits the application.
Affected configurations
• surveyking surveyking 0.2.0
Related
Weakness · not in database (1)
References
- https://github.com/javahuang/SurveyKing Product, Third Party Advisory
- https://github.com/javahuang/SurveyKing/issues/7 Exploit, Issue Tracking, Third Party Advisory
- https://github.com/javahuang/SurveyKing Product, Third Party Advisory
- https://github.com/javahuang/SurveyKing/issues/7 Exploit, Issue Tracking, Third Party Advisory