CVE-2022-31158CWE-294

Authentication Bypass by Capture-replay in packbackbooks/lti-1-3-php-library

High · published July 15, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
58.0
In the wild
Unconfirmed
What it is

LTI 1.3 Tool Library is a library used for building IMS-certified LTI 1.3 tool providers in PHP. Prior to version 5.0, the Nonce Claim Value was not being validated against the nonce value sent in the Authentication Request. Users should upgrade to version 5.0 to receive a patch. There are currently no known workarounds.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00856 · 58.0th percentile
Weakness
CWE-294 · Authentication Bypass by Capture-replay
Published
2022-07-15T17:15Z
EPSS history
Timeline
  • 15 JUL 17:15Z
    Authentication Bypass by Capture-replay in packbackbooks/lti-1-3-php-library
    cvelistv5