CVE-2025-32808

7.7HIGH

W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because only client-side access control exists.

发布于: 4/11/2025更新于: 10/30/2025

描述

W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because only client-side access control exists.

AI分析AI驱动

受影响产品

wwnortoninquizitive

参考资料