CVE-2025-8756: TDuckCloud tduck-platform manage preHandle improper authorization

Q: What is the severity of CVE-2025-8756?

CVE-2025-8756 is classified as a critical vulnerability.

Q: How do I fix CVE-2025-8756?

To fix CVE-2025-8756, update TDuckCloud tduck-platform to version 5.2 or later.

Q: What components are affected by CVE-2025-8756?

CVE-2025-8756 affects the preHandle function in the AuthorizationInterceptor of TDuckCloud tduck-platform up to version 5.1.

Q: What type of vulnerability is CVE-2025-8756?

CVE-2025-8756 is a manipulation issue that can lead to unauthorized access.

Q: Who is impacted by CVE-2025-8756?

Users of TDuckCloud tduck-platform versions up to and including 5.1 are impacted by CVE-2025-8756.

Published Aug 9, 2025

Updated

A vulnerability has been found in TDuckCloud tduck-platform up to 5.1 and classified as critical. Affected by this vulnerability is the function preHandle of the file /manage/ of the component com.tduck.cloud.api.web.interceptor.AuthorizationInterceptor. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

TDuckCloud tduck-platform<=5.1

Event History

Aug 9, 2025

CVE Published

via MITRE·02:32 PM

Data Sourced

via MITRE·02:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Jun 23, 58473

Event

via NVD·05:16 PM

Frequently Asked Questions

What is the severity of CVE-2025-8756?

CVE-2025-8756 is classified as a critical vulnerability.

How do I fix CVE-2025-8756?

To fix CVE-2025-8756, update TDuckCloud tduck-platform to version 5.2 or later.

What components are affected by CVE-2025-8756?