Tduckcloud Tduck-Survey-Form
2 CVEs affecting Tduckcloud Tduck-Survey-Form. Latest disclosed: 2026-09-16. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-92602 | High | 7.1 | 2026-09-16 | TDuck survey form through version 5.3 fails to validate webhook URLs or verify form ownership in the WebhookConfigController. Authenticated attackers can attac… |
CVE-2026-92567 | Medium | 6.5 | 2026-09-16 | TDuck survey form through version 5.0 contains an authorization bypass vulnerability in the POST /user/form/data/update endpoint that allows authenticated user… |