Vulnerabilities in TDuckCloud
15 resultsCVE-2025-7888MEDIUMTDuckCloud tduck-platform UserFormDataMapper.java UserFormDataMapper sql injectionEPSS 0.6%CVE-2024-8692MEDIUMTDuckCloud TDuckPro password recoveryEPSS 0.5%CVE-2025-0558MEDIUMTDuckCloud tduck-platform QueryProThemeRequest.java QueryProThemeRequest sql injectionEPSS 0.5%CVE-2026-92567HIGHTDuck survey form through 5.0 Unauthorized Data ModificationEPSS 0.4%CVE-2025-8756MEDIUMTDuckCloud tduck-platform manage preHandle improper authorizationEPSS 0.4%CVE-2026-92602HIGHTDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URLEPSS 0.4%CVE-2026-100306MEDIUMTDuck survey form through 6.0 Write Password Bypass via Client-Side EnforcementEPSS 0.4%CVE-2026-100304MEDIUMTDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership CheckEPSS 0.4%CVE-2026-95829MEDIUMTDuckCloud tduck-platform Pagination Inner Interceptor MybatisPlusConfig.java PaginationInnerInterceptor.concatOrderBy sql injectionEPSS 0.3%CVE-2026-109164HIGHTDuck survey form through 6.0 Authorization Bypass via User-Controlled Submission IDs in POST /user/form/data/delete/{formKey}EPSS 0.3%CVE-2026-100303MEDIUMTDuck survey form through 6.0 Missing Authorization in Form Theme Management EndpointsEPSS 0.3%CVE-2026-100305MEDIUMTDuck survey form through 6.0 Fill-In Restriction Bypass via Authenticated Submission EndpointEPSS 0.3%CVE-2026-111621MEDIUMTDuck Survey Form through 5.3 Missing Authorization via /user/form/setting/{key}EPSS 0.3%CVE-2026-109165MEDIUMTDuck survey form through 6.0 Authorization Bypass via User-Controlled Form Key in POST /user/form/item/batch/createEPSS 0.2%CVE-2026-109167MEDIUMTDuck survey form through 6.0 Authorization Bypass via User-Controlled Theme ID in POST /user/form/theme/saveEPSS 0.2%