PT-2022-28057 · Unknown · Fp Masterquiz

Kurt Gusbeth · Published 2022-12-14 · Updated 2025-04-21 · CVE-2022-47407

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions fp masterquiz extension versions 2.2.0 and earlier, 3.x before 3.5.1

Description An issue allows an attacker to continue the quiz of a different user, enabling them to view and modify that user's answers.

Recommendations For fp masterquiz extension versions 2.2.0 and earlier, update to version 2.2.1 or later. For fp masterquiz extension versions 3.x before 3.5.1, update to version 3.5.1 or later.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2022-47407

GHSA-7GPW-FRPH-FWRG

Affected Products

Fp Masterquiz

References · 10

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/fixpunkt/fp-masterquiz/CVE-2022-47407.yaml · Exploit
• https://osv.dev/vulnerability/GHSA-7gpw-frph-fwrg · Vendor Advisory
• https://typo3.org/security/advisory/typo3-ext-sa-2022-018 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47407 · Security Note
• https://osv.dev/vulnerability/CVE-2022-47407 · Vendor Advisory
• https://github.com/bihor/fp_masterquiz/commit/fce4ec64600df3f38cacc9a86ba2bd063a51e140 · Note
• https://github.com/bihor/fp_masterquiz/commit/f6f1baa594334c629637f5b87478ae31cdcaaa09 · Note
• https://t.me/cvenotify/39906 · Telegram Post
• https://t.me/cvenotify/40086 · Telegram Post
• https://t.me/cvenotify/119230 · Telegram Post