{"id":"GHSA-7gpw-frph-fwrg","aliases":["CVE-2022-47407"],"title":"TYPO3-EXT-SA-2022-018: Multiple vulnerabilities in extension \"Master-Quiz\" (fp_masterquiz)","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"An issue was discovered in the fp_masterquiz (aka Master-Quiz) extension before 2.2.1, and 3.x before 3.5.1, for TYPO3. An attacker can continue the quiz of a different user. In doing so, the attacker can view that user's answers and modify those answers.","severity":"medium","score":6.5,"published":"2022-12-14T21:30:16.000Z","modified":"2025-04-23T14:51:05.226Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"fixpunkt/fp-masterquiz","sources":[{"name":"OSV · GHSA-7gpw-frph-fwrg","url":"https://osv.dev/vulnerability/GHSA-7gpw-frph-fwrg"}],"ranges":[{"events":[{"introduced":"3.0.0"},{"fixed":"3.5.2"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["3.5.2"]},{"ecosystem":"Packagist","name":"fixpunkt/fp-masterquiz","sources":[{"name":"OSV · GHSA-7gpw-frph-fwrg","url":"https://osv.dev/vulnerability/GHSA-7gpw-frph-fwrg"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.2.1"}],"type":"ECOSYSTEM"}],"versions":["v1.0.0"],"fixed":["2.2.1"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2022-47407","https://github.com/bihor/fp_masterquiz/commit/f6f1baa594334c629637f5b87478ae31cdcaaa09","https://github.com/bihor/fp_masterquiz/commit/fce4ec64600df3f38cacc9a86ba2bd063a51e140","https://github.com/FriendsOfPHP/security-advisories/blob/master/fixpunkt/fp-masterquiz/CVE-2022-47407.yaml","https://typo3.org/security/advisory/typo3-ext-sa-2022-018"],"sources":[{"name":"OSV","id":"GHSA-7gpw-frph-fwrg","modified":"2025-04-23T14:51:05.226554Z","url":"https://osv.dev/vulnerability/GHSA-7gpw-frph-fwrg"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","score":6.5}],"products":[],"remediation":[],"kev":{"status":"unavailable","checkedAt":"2026-10-28T11:55:31.891Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}