CVE-2023-37733
Cross-site scripting in Tduckcloud Tduck Platform
CVSS score
6.1
EPSS probability
%0.4
Risk score
0.0
Published
3 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
https://github.com/TDuckCloud/tduck-platform/issues/17
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2025-57631
Vulnerability in N/a
N
Patch status unknownEPSS %1
7.1
CVE-2026-92567
TDuck survey form through 5.0 Unauthorized Data Modification
T
Patch status unknownEPSS %0
7.1
CVE-2026-92602
TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URL
T
Patch status unknownEPSS %0
6.9
CVE-2026-100306
TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement
T
Patch status unknownEPSS %0
7.1
CVE-2026-109164
TDuck survey form through 6.0 Authorization Bypass via User-Controlled Submission IDs in POST /user/form/data/delete/{formKey}
T
Patch status unknownEPSS %0
6.0
CVE-2026-100304
TDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership Check
T
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-37733"