TDuck Survey Form Authenticated Submission Bypass

Executive Summary

TDuck survey form through version 6.0 has a vulnerability where the authenticated submission endpoint POST /user/form/data/create does not enforce form fill-in restrictions. Authenticated attackers who know a form's key can submit unlimited entries to any form, bypassing restrictions like publish status, time window, quota, and per-IP limits. This allows falsification of collected survey results.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor POST requests to /user/form/data/create endpoints for unusual submission patterns. Check for excessive form submissions from single IPs or users, especially if they bypass expected restrictions like quotas or time windows.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to skewed survey results, as attackers can submit unlimited fake entries. It may also cause quota exhaustion, disrupt legitimate data collection, and undermine trust in survey integrity. Organizations relying on these surveys for decision-making could make incorrect choices based on falsified data.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows authenticated attackers to submit unlimited false entries to any form, bypassing restrictions like quotas and time windows. This could lead to falsified data collection, which may violate compliance requirements for data integrity and accuracy under standards like GDPR and HIPAA.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update TDuck survey form to the latest version. Implement server-side validation to enforce form restrictions. Restrict access to the /user/form/data/create endpoint and log all submissions for review.

Useful 0 Not Useful 0