Skip to content
OpenAdvisories

Vendor

javahuang

1 known vulnerabilities.

Products

SurveyKing 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-111646

    SurveyKing before 1.13.0 Unauthenticated File Download via /api/public/preview

    SurveyKing before 1.13.0 contains a missing authorization vulnerability that allows unauthenticated attackers to download any stored file by id through GET /api/public/preview/{attachmentId}. Attackers who know or derive time-ordered snowflake file ids can by…

    javahuang SurveyKing