What’s Vulnerable › Vulnerabilities

CVE-2025-63248

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-11-05 · updated 2026-10-27
• Weakness: CWE-639

Description

DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. When deleting a questionnaire, replacing the questionnaire ID with the ID of another questionnaire can enable the deletion of other questionnaires.

Affected products

• diaowen DWSurvey: 6.14.0

References

• https://gitee.com/wkeyuan/DWSurvey
• https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-63248.md

Get alerted when CVE-2025-63248 or the next vulnerability affects your stack