PYSEC-2023-21

🗓️ 26 Jan 2023 21:00:18Reported by GoogleType

osv🔗 osv.dev👁 8 Views

LTI Consumer XBlock vulnerability in versions 7.0.0 to 7.2.2 allows unauthorized score submission

Reporter	Title	Published	Views	Family All 8
Cvelist	CVE-2023-23611 xblock-lti-consumer contain Missing Authorization in Grade Pass Back Implementation	25 Jan 202305:39	–	cvelist
NVD	CVE-2023-23611	26 Jan 202321:18	–	nvd
OSV	CVE-2023-23611	26 Jan 202321:18	–	osv
OSV	LTI 1.3 Grade Pass Back Implementation has Missing Authorization Vulnerability	30 Aug 202418:47	–	osv
Veracode	Missing Authorization	2 Feb 202304:55	–	veracode
CVE	CVE-2023-23611	26 Jan 202321:18	–	cve
Prion	Authorization	26 Jan 202321:18	–	prion
Github Security Blog	LTI 1.3 Grade Pass Back Implementation has Missing Authorization Vulnerability	30 Aug 202418:47	–	github

Source	Link
github	www.github.com/openedx/xblock-lti-consumer/security/advisories/GHSA-7j9p-67mm-5g87

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Jan 2023 21:18Current

5.5Medium risk

Vulners AI Score5.5

CVSS35.4

EPSS0.001