GCVE - cpe:2.3:a:packbackbooks:lti-1-3-php-library:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:packbackbooks:lti-1-3-php-library:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Packbackbooks (`7e28bf53-32e6-5389-a3f6-093661e012e7`)
Product	Lti 1 3 Php Library (`83436700-bccb-5cb4-9681-18cca6b3f44d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-31158`	vulnerable	2026-06-08 05:43:40.300284	Authentication Bypass by Capture-replay in packbackbooks/lti-1-3-php-library HIGH (7.5) LTI 1.3 Tool Library is a library used for building IMS-certified LTI 1.3 tool providers in PHP. Prior to version 5.0, the Nonce Claim Value was not being validated against the nonce value sent in the Authentication Request. Users should upgrade to version 5.0 to receive a patch. There are currently no known workarounds. Published: 2022-07-15T17:15:12.000Z Updated: 2025-04-23T17:58:17.098Z Open on db.gcve.eu Reference links https://github.com/packbackbooks/lti-1-3-php-library/security/advisories/GHSA-5p73-qg2v-383h	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-31157`	vulnerable	2026-06-08 05:43:40.299187	Use of a Broken or Risky Cryptographic Algorithm in packbackbooks/lti-1-3-php-library HIGH (7.5) LTI 1.3 Tool Library is a library used for building IMS-certified LTI 1.3 tool providers in PHP. Prior to version 5.0, the function used to generate random nonces was not sufficiently cryptographically complex. Users should upgrade to version 5.0 to receive a patch. There are currently no known workarounds. Published: 2022-07-15T17:15:21.000Z Updated: 2025-04-23T17:58:11.075Z Open on db.gcve.eu Reference links https://github.com/packbackbooks/lti-1-3-php-library/security/advisories/GHSA-768m-5w34-2xf5	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.