CVE-2024-35050

An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin.

• CWE-613

• https://github.com/javahuang/SurveyKing/issues/57Exploit, Issue Tracking, Third Party Advisory
• https://github.com/javahuang/SurveyKing/issues/57Exploit, Issue Tracking, Third Party Advisory

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3502In lunary-ai/lunary versions up to and including 1.2.5, an i…8.1
• CVE-2024-35039idccms V1.35 was discovered to contain a Cross-Site Request …3.8
• CVE-2024-3504An improper access control vulnerability exists in lunary-ai…6.5
• CVE-2024-35048An issue in SurveyKing v1.3.1 allows attackers to execute a …4.3
• CVE-2024-35049SurveyKing v1.3.1 was discovered to keep users' sessions act…9.1
• CVE-2024-3505JFrog Artifactory Self-Hosted versions below 7.77.3, are vul…4.3
• CVE-2024-35056NASA AIT-Core v2.5.2 was discovered to contain multiple SQL …9.8
• CVE-2024-35057An issue in NASA AIT-Core v2.5.2 allows attackers to execute…7.5
• CVE-2024-35058An issue in the API wait function of NASA AIT-Core v2.5.2 al…7.5
• CVE-2024-35059An issue in the Pickle Python library of NASA AIT-Core v2.5.…7.5
• CVE-2024-3506A possible buffer overflow in selected cameras' drivers from…7.3
• CVE-2024-35060An issue in the YAML Python library of NASA AIT-Core v2.5.2 …7.5