CyberSecBulletin

Packbackbooks vulnerabilities

We track 2 vulnerabilities in Packbackbooks products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 15, 2022.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Packbackbooks vulnerabilities

  • 7.5 High severity

    lti-1-3-php-library: Authentication Bypass by Capture-replay

    CVE-2022-31158Packbackbooks

    LTI 1.3 Tool Library is a library used for building IMS-certified LTI 1.3 tool providers in PHP. Prior to version 5.0, the Nonce Claim Value was not being validated against the nonce value sent in the Authentication Request. Users should upgrade to version 5.0

  • 7.5 High severity

    lti-1-3-php-library: Use of Insufficiently Random Values

    CVE-2022-31157Packbackbooks

    LTI 1.3 Tool Library is a library used for building IMS-certified LTI 1.3 tool providers in PHP. Prior to version 5.0, the function used to generate random nonces was not sufficiently cryptographically complex. Users should upgrade to version 5.0 to receive a