Advisories · Technology
TDuckCloud tduck-survey-form.
Every CVE that names TDuckCloud tduck-survey-form among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
TDuck Survey Form through 5.3 Missing Authorization via /user/form/setting/{key}
- TDuckCloud tduck-survey-form
- Broken access control
- CVSS 5.3 Medium
TDuck survey form through 6.0 Authorization Bypass via User-Controlled Theme ID in POST /user/form/theme/save
- TDuckCloud tduck-survey-form
- Broken access control
- CVSS 5.3 Medium
TDuck survey form through 6.0 Authorization Bypass via User-Controlled Form Key in POST /user/form/item/batch/create
- TDuckCloud tduck-survey-form
- Broken access control
- CVSS 7.1 High
TDuck survey form through 6.0 Authorization Bypass via User-Controlled Submission IDs in POST /user/form/data/delete/{formKey}
- TDuckCloud tduck-survey-form
- Broken access control
- CVSS 6.9 Medium
TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement
- TDuckCloud tduck-survey-form
- CWE-602
- CVSS 5.3 Medium
TDuck survey form through 6.0 Fill-In Restriction Bypass via Authenticated Submission Endpoint
- TDuckCloud tduck-survey-form
- Broken access control
- CVSS 6.0 Medium
TDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership Check
- TDuckCloud tduck-survey-form
- CWE-636
- CVSS 5.3 Medium
TDuck survey form through 6.0 Missing Authorization in Form Theme Management Endpoints
- TDuckCloud tduck-survey-form
- Broken access control
- CVSS 7.1 High
TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URL
- TDuckCloud tduck-survey-form
- Server-side request forgery (SSRF)
- CVSS 7.1 High
TDuck survey form through 5.0 Unauthorized Data Modification
- TDuckCloud tduck-survey-form
- Broken access control