CVE-2022-47407

An issue was discovered in the fp_masterquiz (aka Master-Quiz) extension before 2.2.1, and 3.x before 3.5.1, for TYPO3. An attacker can continue the quiz of a different user. In doing so, the attacker can view that user's answers and modify those answers.

• CWE-284

• https://typo3.org/security/advisory/typo3-ext-sa-2022-018Patch, Vendor Advisory
• https://typo3.org/security/advisory/typo3-ext-sa-2022-018Patch, Vendor Advisory

Published

Dec 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-47401Rejected reason: Not used
• CVE-2022-47402Rejected reason: Not used
• CVE-2022-47403Rejected reason: Not used
• CVE-2022-47404Rejected reason: Not used
• CVE-2022-47405Rejected reason: Not used
• CVE-2022-47406An issue was discovered in the fe_change_pwd (aka Change pas…9.8
• CVE-2022-47408An issue was discovered in the fp_newsletter (aka Newsletter…9.1
• CVE-2022-47409An issue was discovered in the fp_newsletter (aka Newsletter…7.5
• CVE-2022-4741A vulnerability was found in docconv up to 1.2.0 and classif…6.5
• CVE-2022-47410An issue was discovered in the fp_newsletter (aka Newsletter…7.5
• CVE-2022-47411An issue was discovered in the fp_newsletter (aka Newsletter…7.5
• CVE-2022-47412Given a malicious document provided by an attacker, the ONLY…5.4