Description
SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file.
High · 8.1
CVE-2023-51805
EUVD-2023-56489GHSA-x7pr-w7j8-77wg
SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey …
Published Jan 13, 2024 · Updated Jun 20, 2025 · Assigned by mitre