| शीर्षक | diaowen DWSurvey v6.14.0 Improper Access Controls |
|---|
| विवरण | The system's survey publishing function contains an authorization bypass vulnerability. Any authenticated regular user can illegally publish another user's survey simply by knowing the survey ID. After successfully exploiting this vulnerability, an attacker can change the operational status of another user's survey and overwrite its published cache content. The tampering result can be verified by querying the survey details. |
|---|
| स्रोत | ⚠️ https://drive.google.com/file/d/1S4_tO4YGk4schmB7AIZa3dq3wGxgfN8T/view?usp=sharing |
|---|
| उपयोगकर्ता | Stephen Lin (UID 98370) |
|---|
| सबमिशन | 11/06/2026 06:24 PM (2 महीनों पहले) |
|---|
| संयम | 03/08/2026 07:50 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 385633 [diaowen DWSurvey तक 6.14.0 dev-survey.do in DwDeisgnSurveyController.devSurvey. अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|