CVEvulnerability

CVE-2025-32808

7.7 HIGH Published 2025-04-11 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-04-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.7 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
CVSS 3.1 ([email protected])
7.7 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
Weaknesses
CWE-602

Description

W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because only client-side access control exists.

Affected configurations

• wwnorton inquizitive (<= 2025-04-08)

Related

Weakness · CWE (1)

  • CWE-602 Client-Side Enforcement of Server-Side Security weakness

References