CVE-2022-46484

Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.86% chance of exploitation in the next 30 days, 56th percentile

Published

2023-08-02

Updated

2024-10-17

Proof-of-concept exploits (2)

• NevaSec/CVE-2022-464842★ · 2023-01-11
• WodenSec/CVE-2022-464842★ · 2023-01-11

References

• CVE Record
• NVD entry

Related

• CVE-2022-46485
• CVE-2022-4648
• CVE-2022-46478
• CVE-2022-46486
• CVE-2022-46476
• CVE-2022-46489