All 5 CVE vulnerabilities found in tduck-platform, with AI-generated Chinese analysis, references, and POCs.
Vendor: TDuckCloud
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-95829 | TDuckCloud tduck-platform Pagination Inner Interceptor MybatisPlusConfig.java PaginationInnerInterceptor.concatOrderBy sql injection CWE-89 | 6.3 | Medium | 2026-09-22 |
| CVE-2026-90528 | TDuckApp tduck-platform Form Write View index.vue cross site scripting CWE-79 | 3.5 | Low | 2026-09-13 |
| CVE-2025-8756 | TDuckCloud tduck-platform manage preHandle improper authorization CWE-285 | 6.3 | Medium | 2025-08-09 |
| CVE-2025-7888 | TDuckCloud tduck-platform UserFormDataMapper.java UserFormDataMapper sql injection CWE-89 | 6.3 | Medium | 2025-07-20 |
| CVE-2025-0558 | TDuckCloud tduck-platform QueryProThemeRequest.java QueryProThemeRequest sql injection CWE-89 | 6.3 | Medium | 2025-01-18 |
All 5 known CVE vulnerabilities affecting tduck-platform with full Chinese analysis, references, and POCs where available.