CVE-2022-31157
Use of a Broken or Risky Cryptographic Algorithm in packbackbooks/lti-1-3-php-library
Vexday Risk Score
21Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 7.5EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
15 jul 2022Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
LTI 1.3 Tool Library is a library used for building IMS-certified LTI 1.3 tool providers in PHP. Prior to version 5.0, the function used to generate random nonces was not sufficiently cryptographically complex. Users should upgrade to version 5.0 to receive a patch. There are currently no known workarounds.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Produtos afetados
packbackbooks · lti-1-3-php-libraryQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →