CVE-2023-51805: Tduckcloud Tduck-Platform

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file.

Affected products

• Tduckcloud Tduck-Platform: version 4.0 only

Published 2024-01-13. Last modified 2026-06-17.