Tduckcloud Tduck Platform
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Tduckcloud Tduck Platform.
By the Year
In 2026 there have been 1 vulnerability in Tduckcloud Tduck Platform with an average score of 5.3 out of ten. Tduck Platform did not have any published security vulnerabilities last year. That is, 1 more vulnerability have already been reported in 2026 as compared to last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 5.30 |
| 2025 | 0 | 0.00 |
| 2024 | 1 | 6.50 |
| 2023 | 1 | 0.00 |
It may take a day or so for new Tduck Platform vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Tduckcloud Tduck Platform Security Vulnerabilities
TDuckCloud tduck-platform <=5.3 PaginationInnerInterceptor SQL Injection
CVE-2026-95829
5.3 - Medium
- September 22, 2026
A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function PaginationInnerInterceptor.concatOrderBy of the file tduck-api/src/main/java/com/tduck/cloud/api/config/MybatisPlusConfig.java of the component Pagination Inner Interceptor. The manipulation of the argument orders[0].column leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The identifier of the patch is ea7f0fae7cb0fd998a3284c11addce689350cd69. It is suggested to install a patch to address this issue.
SQL Injection
SQLi in TDuckCLoud tduck-platform v4.0 FormDataMysqlService.getFormKey
CVE-2023-51805
6.5 - Medium
- January 13, 2024
SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file.
SQL Injection
tduck-platform v4.0 Arbitrary File Upload Enabling Remote Code Exec
CVE-2023-37733
- July 19, 2023
An arbitrary file upload vulnerability in tduck-platform v4.0 allows attackers to execute arbitrary code via a crafted HTML file.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Tduckcloud Tduck Platform or by Tduckcloud? Click the Watch button to subscribe.
