CVE-2025-32808

7.7HIGH

W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because only client-side access control exists.

Publicado: 4/11/2025Actualizado: 10/30/2025

Descripción

W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because only client-side access control exists.

Análisis IAImpulsado por IA

Productos Afectados

wwnortoninquizitive

Referencias