https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-8756.htmlhttps://patchthecve.com/cve/CVE-2025-8756.htmlWed, 17 Jun 2026 10:07:34 +0000MEDIUM 6.3: A vulnerability has been found in TDuckCloud tduck-platform up to 5.1 and classified as critical. Affected by this vulnerability is the function preHandle of the file /manage/ of the component com.tduck.cloud.api.web.interceptor.AuthorizationInterceptor. The manipulation leads to improper authorizathttps://patchthecve.com/cve/CVE-2025-7888.htmlhttps://patchthecve.com/cve/CVE-2025-7888.htmlWed, 17 Jun 2026 10:05:52 +0000MEDIUM 6.3: A vulnerability was found in TDuckCloud tduck-platform 5.1 and classified as critical. This issue affects the function UserFormDataMapper of the file src/main/java/com/tduck/cloud/form/mapper/UserFormDataMapper.java. The manipulation of the argument formKey leads to sql injection. The attack may be https://patchthecve.com/cve/CVE-2025-0558.htmlhttps://patchthecve.com/cve/CVE-2025-0558.htmlWed, 17 Jun 2026 08:26:42 +0000MEDIUM 6.3: A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0. This vulnerability affects the function QueryProThemeRequest of the file src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.java. The manipulation of the argument color leads to sql injection. The ahttps://patchthecve.com/cve/CVE-2023-51805.htmlhttps://patchthecve.com/cve/CVE-2023-51805.htmlWed, 17 Jun 2026 06:41:43 +0000MEDIUM 6.5: SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file.