CVE-2025-32808

High

W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because…

mitre·CWE-602·Published 2025-04-11

CVSS

7.7

EPSS

0.00

KEV

Exploits

Tags:exclusively-hosted-service

cve.orgen

179 chars

W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because only client-side access control exists.

NVDen

179 chars

W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because only client-side access control exists.

WW Norton InQuizitive hasta el 08/04/2025 permite a los estudiantes insertar registros arbitrarios de su desempeño en las pruebas en el backend, porque solo existe control de acceso del lado del cliente.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.7	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
3.1	Primary	NVD	7.7	3.1	4.0	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
3.1	Primary	cve.org	7.7	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
3.1	Secondary	NVD	7.7	3.1	4.0	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N