Tduckcloud Tduck vulnerabilities

• tduckcloud tduck-survey-form TDuck Survey Form through 5.3 Missing Authorization via /user/form/setting/{key} CVE-2026-111621 5.3 MediumOctober 16, 2026
• tduckcloud tduck-survey-form TDuck survey form through 6.0 Authorization Bypass via User-Controlled Theme ID in POST /user/form/theme/save CVE-2026-109167 5.3 MediumOctober 12, 2026
• tduckcloud tduck-survey-form TDuck survey form through 6.0 Authorization Bypass via User-Controlled Form Key in POST /user/form/item/batch/create CVE-2026-109165 5.3 MediumOctober 12, 2026
• tduckcloud tduck-survey-form TDuck survey form through 6.0 Authorization Bypass via User-Controlled Submission IDs in POST /user/form/data/delete/{formKey} CVE-2026-109164 7.1 HighOctober 12, 2026
• tduckcloud tduck-survey-form TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement CVE-2026-100306 6.9 MediumSeptember 25, 2026
• tduckcloud tduck-survey-form TDuck survey form through 6.0 Fill-In Restriction Bypass via Authenticated Submission Endpoint CVE-2026-100305 5.3 MediumSeptember 25, 2026
• tduckcloud tduck-survey-form TDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership Check CVE-2026-100304 6.0 MediumSeptember 25, 2026
• tduckcloud tduck-survey-form TDuck survey form through 6.0 Missing Authorization in Form Theme Management Endpoints CVE-2026-100303 5.3 MediumSeptember 25, 2026
• tduckcloud tduck-platform TDuckCloud tduck-platform Pagination Inner Interceptor MybatisPlusConfig.java PaginationInnerInterceptor.concatOrderBy sql injection CVE-2026-95829 5.3 MediumSeptember 22, 2026
• tduckcloud tduck-survey-form TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URL CVE-2026-92602 7.1 HighSeptember 16, 2026
• tduckcloud tduck-survey-form TDuck survey form through 5.0 Unauthorized Data Modification CVE-2026-92567 7.1 HighSeptember 16, 2026
• tduckapp tduck-platform TDuckApp tduck-platform Form Write View index.vue cross site scripting CVE-2026-90528 5.1 MediumSeptember 13, 2026
• tduckcloud tduck SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary... CVE-2025-57631 9.8 CriticalSeptember 16, 2025
• tduckcloud tduck-platform TDuckCloud tduck-platform manage preHandle improper authorization CVE-2025-8756 5.3 MediumAugust 9, 2025
• tduckcloud tduck-platform TDuckCloud tduck-platform UserFormDataMapper.java UserFormDataMapper sql injection CVE-2025-7888 5.3 MediumJuly 20, 2025
• tduckcloud tduck-platform TDuckCloud tduck-platform QueryProThemeRequest.java QueryProThemeRequest sql injection CVE-2025-0558 5.3 MediumJanuary 18, 2025
• tduckcloud tduckpro TDuckCloud TDuckPro password recovery CVE-2024-8692 6.9 MediumSeptember 11, 2024
• tduckcloud tduck-platform SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain... CVE-2023-51805 6.5 MediumJanuary 13, 2024
• tduckcloud tduck-platform An arbitrary file upload vulnerability in tduck-platform v4.0 allows attackers to execute... CVE-2023-37733 6.1 MediumJuly 19, 2023