CVEvulnerability

CVE-2022-31158

7.5 HIGH Published 2022-07-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-07-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-294

Description

LTI 1.3 Tool Library is a library used for building IMS-certified LTI 1.3 tool providers in PHP. Prior to version 5.0, the Nonce Claim Value was not being validated against the nonce value sent in the Authentication Request. Users should upgrade to version 5.0 to receive a patch. There are currently no known workarounds.

Affected configurations

• packback lti 1.3 tool library (< 5.0.0)

Related

Weakness · CWE (1)

  • CWE-294 Authentication Bypass by Capture-replay weakness

References