CVE-2025-32808

7.7HIGH

W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because only client-side access control exists.

Veröffentlicht: 4/11/2025Aktualisiert: 10/30/2025

Beschreibung

W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because only client-side access control exists.

KI-AnalyseKI-gestützt

Betroffene Produkte

wwnortoninquizitive

Referenzen