CVE-2022-47407
An issue was discovered in the fp_masterquiz (aka Master-Quiz) extension before 2.2.1, and 3.x before 3.5.1, for TYPO3. An attacker can continue the quiz of a different user. In…
Published: 2022-12-14 · CVSS: 6.5 · CVSS 3.1
An issue was discovered in the fp_masterquiz (aka Master-Quiz) extension before 2.2.1, and 3.x before 3.5.1, for TYPO3. An attacker can continue the quiz of a different user. In doing so, the attacker can view that user's answers and modify those answers.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7