What’s Vulnerable › Vulnerabilities

CVE-2022-47407

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-14 · updated 2026-06-17
• Weakness: CWE-284

Description

An issue was discovered in the fp_masterquiz (aka Master-Quiz) extension before 2.2.1, and 3.x before 3.5.1, for TYPO3. An attacker can continue the quiz of a different user. In doing so, the attacker can view that user's answers and modify those answers.

Affected products

• Master-Quiz Project Master-Quiz: before 2.2.1; from 3.0.0 before 3.5.1 — fixed in 2.2.1, 3.5.1

How to fix

Upgrade to a fixed version: Master-Quiz Project Master-Quiz 2.2.1, 3.5.1. Check the vendor advisory for mitigations.

References

• https://typo3.org/security/advisory/typo3-ext-sa-2022-018
• https://typo3.org/security/advisory/typo3-ext-sa-2022-018

Get alerted when CVE-2022-47407 or the next vulnerability affects your stack