CVE-2022-31157CWE-327

Use of a Broken or Risky Cryptographic Algorithm in packbackbooks/lti-1-3-php-library

High · published July 15, 2022

CVSS v3.1
7.5
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

LTI 1.3 Tool Library is a library used for building IMS-certified LTI 1.3 tool providers in PHP. Prior to version 5.0, the function used to generate random nonces was not sufficiently cryptographically complex. Users should upgrade to version 5.0 to receive a patch. There are currently no known workarounds.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00453 · 38.3th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2022-07-15T17:15Z
EPSS history
Timeline
  • 15 JUL 17:15Z
    Use of a Broken or Risky Cryptographic Algorithm in packbackbooks/lti-1-3-php-library
    cvelistv5