Diaowen
Monthly
Improper authorization in diaowen DWSurvey (all versions through 6.14.0) permits authenticated low-privileged users to invoke the Survey Status Handler endpoint beyond their intended access level, enabling unauthorized manipulation of survey state - such as publishing, closing, or altering surveys owned by other accounts. The affected endpoint `/api/dwsurvey/app/survey/up-survey-status.do` is remotely reachable and lacks sufficient authorization enforcement. A public proof-of-concept exploit has been disclosed via Google Drive; no vendor patch exists as the vendor did not respond to responsible disclosure, leaving all current deployments unmitigated.
Authorization bypass in DWSurvey up to version 6.14.0 permits remote authenticated attackers to manipulate user-controlled keys in the Survey Handler's devSurvey function, bypassing access controls on the /api/dwsurvey/app/v6/dw-design-survey/dev-survey.do endpoint. The flaw (CWE-639, Insecure Direct Object Reference class) allows unauthorized read or write access to survey resources belonging to other users. A public proof-of-concept exploit is available and the vendor has not responded to disclosure, leaving no official patch for deployed instances.
DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
DWSurvey through 2019-07-22 has stored XSS via the design/my-survey-design!copySurvey.action surveyName parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Improper authorization in diaowen DWSurvey (all versions through 6.14.0) permits authenticated low-privileged users to invoke the Survey Status Handler endpoint beyond their intended access level, enabling unauthorized manipulation of survey state - such as publishing, closing, or altering surveys owned by other accounts. The affected endpoint `/api/dwsurvey/app/survey/up-survey-status.do` is remotely reachable and lacks sufficient authorization enforcement. A public proof-of-concept exploit has been disclosed via Google Drive; no vendor patch exists as the vendor did not respond to responsible disclosure, leaving all current deployments unmitigated.
Authorization bypass in DWSurvey up to version 6.14.0 permits remote authenticated attackers to manipulate user-controlled keys in the Survey Handler's devSurvey function, bypassing access controls on the /api/dwsurvey/app/v6/dw-design-survey/dev-survey.do endpoint. The flaw (CWE-639, Insecure Direct Object Reference class) allows unauthorized read or write access to survey resources belonging to other users. A public proof-of-concept exploit is available and the vendor has not responded to disclosure, leaving no official patch for deployed instances.
DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
DWSurvey through 2019-07-22 has stored XSS via the design/my-survey-design!copySurvey.action surveyName parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.