tocsin

PyPI/lti-consumer-xblock CVE-2023-23611: unknown, EPSS 0.38%

LTI Consumer XBlock implements the consumer side of the LTI specification enabling integration of third-party LTI provider tools. Versions 7.0.0 and above, prior to 7.2.2, are vulnerable to Missing Au

Action: Upgrade lti-consumer-xblock to 7.2.2 or later.

pip install lti-consumer-xblock==7.2.2

Affected

introducedfixedlast affected
7.0.07.2.2-

Fixed versions

7.2.2

Sources

CVE-2023-23611 · published · modified · JSON