Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2025-32808

W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because only client-side access control exists.

Description

W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because only client-side access control exists.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

W. W. Norton InQuizitive

Default version status: unknown

  • 0 to ≤ 2025-04-08affected

References