Diaowen vulnerabilities
We track 2 vulnerabilities in Diaowen products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2025.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Diaowen vulnerabilities
- 7.5 High severity
Dwsurvey: Authorization Bypass Through User-Controlled Key
DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. When deleting a questionnaire, replacing the questionnaire ID with the ID of another questionnaire can enable the deletion of other questionnaires.
- 9.8 Critical severity
Dwsurvey: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file.