Lucene search

Dwsurvey Security Vulnerabilities - CVSS Score 9 - 10

cve

CVE-2021-39383

DWSurvey v3.2.0 was discovered to contain a remote command execution (RCE) vulnerability via the component /sysuser/SysPropertyAction.java.

9.8CVSS

9.7AI Score

0.005EPSS

2022-03-20 10:15 PM

cve

CVE-2021-39384

DWSurvey v3.2.0 was discovered to contain an arbitrary file write vulnerability via the component /utils/ToHtmlServlet.java.

9.8CVSS

9.6AI Score

0.002EPSS

2022-03-20 10:15 PM

cve

CVE-2023-40980

File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file.

9.8CVSS

9.6AI Score

0.003EPSS

2023-09-01 04:15 PM