DWSurvey is a survey system written in Java. DWSurvey v3.2.0 has a security vulnerability that allows an attacker to write arbitrary files via the component /utils/ToHtmlServlet.java...
9.8CVSS8.3AI score0.01195EPSS
SaveExploits1References2
OSV•added 2019/08/07 4:15 p.m.•6 views
CVE-2019-14747
DWSurvey through 2019-07-22 has stored XSS via the design/my-survey-design!copySurvey.action surveyName parameter...