CVE-2022-31158 - CVE House
Back to Database
Status published High CVE-2022-31158

Authentication Bypass by Capture-replay in packbackbooks/lti-1-3-php-library

Vulnerability Description

LTI 1.3 Tool Library is a library used for building IMS-certified LTI 1.3 tool providers in PHP. Prior to version 5.0, the Nonce Claim Value was not being validated against the nonce value sent in the Authentication Request. Users should upgrade to version 5.0 to receive a patch. There are currently no known workarounds.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-31158

Credits & Attribution

No credits recorded in the NVD database.

References

More from packbackbooks

View All →
CVE-2022-31157
Use of a Broken or Risky Cryptographic Algorithm in packbackbooks/lti-1-3-php-library
High 7.5

Affected Vendor

packbackbooks

View all reports →

Affected Software

lti-1-3-php-library
Vulnerable Versions:
< 5.0

Timeline

Official Publish: July 15th, 2022
Last Modified: April 23rd, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

CWE-294

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.