high7.5
CVE-2025-63248
DWSurvey 6.14.0 is vulnerable to Incorrect Access Control.
Impact
DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. When deleting a questionnaire, replacing the questionnaire ID with the ID of another questionnaire can enable the deletion of other questionnaires.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Diaowen | Dwsurvey | Version 6.14.0 |