CVE-2025-63248

DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. When deleting a questionnaire, replacing the questionnaire ID with the ID of another questionnaire can enable the deletion of other questionnaires...

CVE-2025-63248

DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. When deleting a questionnaire, replacing the questionnaire ID with the ID of another questionnaire can enable the deletion of other questionnaires...

PT-2025-45123

Name of the Vulnerable Software and Affected Versions DWSurvey version 6.14.0 Description DWSurvey 6.14.0 has an issue with access control. Specifically, when deleting a questionnaire, manipulating the questionnaire ID to match another questionnaire’s ID allows for the deletion of unintended...

CVE-2025-63248

The open-source Java-based questionnaire system DWSurvey version 6.14.0 is vulnerable to Incorrect Access Control (CWE-639). An attacker can exploit this by replacing a questionnaire ID with the ID of another questionnaire during a deletion request, leading to the unauthorized deletion of uninten...