CVE-2025-63248

DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. When deleting a questionnaire, replacing the questionnaire ID with the ID of another questionnaire can enable the deletion of other questionnaires...

CVE-2025-63248

DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. When deleting a questionnaire, replacing the questionnaire ID with the ID of another questionnaire can enable the deletion of other questionnaires...

CVE-2025-63248

DWSurvey 6.14.0 is affected by an Incorrect Access Control issue in the questionnaire deletion flow. Replacing the targeted questionnaire ID with another ID can enable deletion of additional questionnaires, revealing a path to unauthorized modification of data. Affected product: DWSurvey 6.14.0. ...

PT-2025-45123

Name of the Vulnerable Software and Affected Versions DWSurvey version 6.14.0 Description DWSurvey 6.14.0 has an issue with access control. Specifically, when deleting a questionnaire, manipulating the questionnaire ID to match another questionnaire’s ID allows for the deletion of unintended...