cvedb.io
CVE-2023-34831
MEDIUM · CVSS 5.4
EPSS exploitation probability: 0%
Published 2023-06-29T03:15:09.517 · Last modified 2026-06-17T06:04:01.913

Summary

The "Submission Web Form" of Turnitin LTI tool/plugin version 1.3 is affected by HTML Injection attacks. The security issue affects the submission web form ("id" and "title" HTTP POST parameters) where the students submit their reports for similarity/plagiarism checks.

Affected products

odysseycs — ithacalabs_turnitin_lti

Does this affect you?

Add your gear to cvedb and we'll alert you only when odysseycs ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.