CVE-2022-47407

An issue was discovered in the fp_masterquiz (aka Master-Quiz) extension before 2.2.1, and 3.x before 3.5.1, for TYPO3

Medium · published December 14, 2022

CVSS v3.1
6.5
EPSS
0%
Percentile
31.7
In the wild
Unconfirmed
What it is

An issue was discovered in the fp_masterquiz (aka Master-Quiz) extension before 2.2.1, and 3.x before 3.5.1, for TYPO3. An attacker can continue the quiz of a different user. In doing so, the attacker can view that user's answers and modify those answers.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00388 · 31.7th percentile
Published
2022-12-14T00:00Z
EPSS history
Timeline
  • 14 DEC 00:00Z
    An issue was discovered in the fp_masterquiz (aka Master-Quiz) extension before 2.2.1, and 3.x before 3.5.1, for TYPO3
    cvelistv5