CVE-2023-51805

The TDuckCloud tduck-platform v.4.0 software contains a SQL Injection vulnerability (CWE-89) within the FormDataMysqlService.java file. A remote attacker can exploit the getFormKey parameter in the search function to obtain sensitive information. As a temporary workaround, it is recommended to re...