GHSA-5p73-qg2v-383h
LTI 1.3 Tool Library's Nonce Claim Value not validated against nonce value sent in Authentication Request before v5.0
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | packbackbooks/lti-1-3-php-library | < 5.0 | 5.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
Nonce Claim Value was not being validated against the nonce value sent in the Authentication Request.
### Patches
Users should upgrade to version 5.0 immediately
### Workarounds
None.
References
External links from the advisory. They lead to third-party sites.