CVEvulnerability

CVE-2022-46484

7.5 HIGH Published 2023-08-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-922

Description

Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys.

Affected configurations

• ngsurvey ngsurvey (<= 2.4.28)

Related

Weakness · CWE (1)

  • CWE-922 Insecure Storage of Sensitive Information weakness

References