{"action":"Upgrade lti-consumer-xblock to 7.2.2 or later.","affected":[{"fixed":"7.2.2","introduced":"7.0.0"}],"component":"lti-consumer-xblock","cve_ids":["CVE-2023-23611"],"ecosystem":"PyPI","epss":0.00384,"exploited":false,"fixed_versions":["7.2.2"],"ghsa_id":"GHSA-7j9p-67mm-5g87","id":"tcs_01M5KGJX0AA662XFVPR2FSG2VQ","modified_at":"2023-11-08T04:11:40.993733Z","published_at":"2023-01-26T21:18:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-21","https://github.com/openedx/xblock-lti-consumer/security/advisories/GHSA-7j9p-67mm-5g87"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-21","url":"https://osv.dev/vulnerability/PYSEC-2023-21"}],"summary":"LTI Consumer XBlock implements the consumer side of the LTI specification enabling integration of third-party LTI provider tools. Versions 7.0.0 and above, prior to 7.2.2, are vulnerable to Missing Au"}