CVE-2022-31157
Use of a Broken or Risky Cryptographic Algorithm in packbackbooks/lti-1-3-php-library
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7.5EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
15 jul 2022Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
LTI 1.3 Tool Library is a library used for building IMS-certified LTI 1.3 tool providers in PHP. Prior to version 5.0, the function used to generate random nonces was not sufficiently cryptographically complex. Users should upgrade to version 5.0 to receive a patch. There are currently no known workarounds.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Productos afectados
packbackbooks · lti-1-3-php-library¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →