CVEvulnerability
CVE-2023-34831
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-06-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
Description
The "Submission Web Form" of Turnitin LTI tool/plugin version 1.3 is affected by HTML Injection attacks. The security issue affects the submission web form ("id" and "title" HTTP POST parameters) where the students submit their reports for similarity/plagiarism checks.
Affected configurations
• odysseycs ithacalabs turnitin lti 1.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://github.com/IthacaLabs/Turnitin/blob/main/Turnitin_LTI_1.3_HTMLi_CVE-2023-34831/Turnitin_LTI_1.3_HTMLi_CVE-2023-34831.txt Exploit, Vendor Advisory
- https://github.com/IthacaLabs/Turnitin/blob/main/Turnitin_Submission_Web_Form/ Broken Link
- https://github.com/IthacaLabs/Turnitin/blob/main/Turnitin_LTI_1.3_HTMLi_CVE-2023-34831/Turnitin_LTI_1.3_HTMLi_CVE-2023-34831.txt Exploit, Vendor Advisory
- https://github.com/IthacaLabs/Turnitin/blob/main/Turnitin_Submission_Web_Form/ Broken Link