Skip to content
OpenAdvisories

Vendor

TDuckCloud

15 known vulnerabilities.

Products

tduck-survey-form 10 tduck-platform 4 TDuckPro 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-109164

    TDuck survey form through 6.0 Authorization Bypass via User-Controlled Submission IDs in POST /user/form/data/delete/{formKey}

    TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' form submissions by supplying arbitrary submission ids. Attackers can place their own formKey in the path and itera…

    TDuckCloud tduck-survey-form
  • High 7.1
    CVE-2026-92602

    TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URL

    TDuck survey form through version 5.3 fails to validate webhook URLs or verify form ownership in the WebhookConfigController. Authenticated attackers can attach webhooks to other users' forms and exfiltrate submissions to arbitrary external or internal addres…

    TDuckCloud tduck-survey-form