← All credits
Thomas Clair
2 vulnerability records and advisories credit this contributor.
CVE-2025-13829
Incorrect Authorization vulnerability in Data Illusion Zumbrunn NGSurvey allows any logged-in user to obtain the private information of any other user.
Critical information retrieved:
* APIKEY (1 year user Session)
* RefreshToken (10 minutes us
CVE-2025-15479
NGSurvey Enterprise 3.6.4 incorrect authorization exposes other users’ API keys and personal data