CVE-2022-47407

An issue was discovered in the fp_masterquiz (aka Master-Quiz) extension before 2.2.1, and 3.x before 3.5.1, for TYPO3. An attacker can continue the quiz of a different user. In doing so, the attacker can view that user's answers and modify those answers.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2022-12-14

Last modified

2025-04-21

Weaknesses

CWE-284

Affected products

• Master-quiz (Master-quiz Project)

References

• https://typo3.org/security/advisory/typo3-ext-sa-2022-018