EPSS
Percentile
31.8%
packbackbooks/lti-1p3-tool uses an insecure cryptographic configuration. The vulnerability exists due to improper configuration of generating cookies and openid values which allows an attacker to predict the token value and forge the token.
github.com/advisories/GHSA-768m-5w34-2xf5
github.com/packbackbooks/lti-1-3-php-library/commit/de19e8a0b28cdc7750fa3ca98471eeed26ba3e57
github.com/packbackbooks/lti-1-3-php-library/releases/tag/v5.0.0
github.com/packbackbooks/lti-1-3-php-library/security/advisories/GHSA-768m-5w34-2xf5