Skip to content
Threat Feed
Subscribe

Vendor

TDuck

2 briefs RSS
high advisory

IDOR Vulnerability in TDuck Survey Form

TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' form submissions by supplying arbitrary submission identifiers.

TDuck survey form web-application idor data-loss impact
1t 1c
high advisory

Unauthenticated Form Submission Exfiltration in TDuck

TDuck survey form through version 5.3 contains a vulnerability allowing authenticated attackers to attach unauthorized webhooks to arbitrary forms for data exfiltration.

TDuck
1t 1c