PyPI/lti-consumer-xblock CVE-2023-23611: low 3.7, EPSS 0.39%
LTI 1.3 Grade Pass Back Implementation has Missing Authorization Vulnerability
Action: Upgrade lti-consumer-xblock to 7.2.2 or later.
pip install lti-consumer-xblock==7.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.2.2 | - |
Fixed versions
| 7.2.2 |
Sources
- osv: GHSA-7j9p-67mm-5g87
- https://github.com/openedx/xblock-lti-consumer/security/advisories/GHSA-7j9p-67mm-5g87
- https://nvd.nist.gov/vuln/detail/CVE-2023-23611
- https://github.com/openedx/xblock-lti-consumer/commit/252f94bd182cd0962af9251015930cb55ec515d7
- https://github.com/openedx/xblock-lti-consumer
- https://github.com/pypa/advisory-database/tree/main/vulns/lti-consumer-xblock/PYSEC-2023-21.yaml
CVE-2023-23611 · published · modified · JSON