CVE-2025-13829 – Data Illusion Zumbrunn NGSurvey Unauthorized Information Disclosure

CVE ID : CVE-2025-13829

Published : Dec. 1, 2025, 3:47 p.m. | 38 minutes ago

Description : Incorrect Authorization vulnerability in Data Illusion Zumbrunn NGSurveyallows any logged-in user to obtain the private information of any other user.

Critical information retrieved:
* APIKEY (1 year user Session)
* RefreshToken (10 minutes user Session)
* Password hashed with bcrypt
* User IP
* Email
* Full Name

Severity: 8.6 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…