CVE-2022-47407

CVE-2022-47407 affects the TYPO3 extension fp_masterquiz (Master-Quiz). In versions before 2.2.1 and 3.x before 3.5.1, an attacker can continue another user’s quiz, exposing and modifying that user’s answers. Root cause: insufficient session/user isolation in the quiz flow. Impact is user data ex...