CVE-2026-53636

Published: Sep 2, 2026Modified: Sep 2, 2026

4.7

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 1.6 / Impact: 2.7

Source: security-advisories@github.com (Secondary)

Description

Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 3a5ac85, a security vulnerability has been identified in the Open edX LMS platform's LTI (Learning Tools Interoperability) Provider implementation. The validate_timestamp_and_nonce function in lms/djangoapps/lti_provider/signature_validator.py does not validate OAuth nonces or timestamps, allowing an attacker who captures a valid LTI launch request to replay it an unlimited number of times without detection. This issue has been patched via commit 3a5ac85.

Related CWEs

CWE-294

Authentication Bypass by Capture-replay

A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).

References (5)

https://github.com/openedx/openedx-platform/commit/0a92cf25de8844bf840ffd5d18dcfd940031a2ba

Source: security-advisories@github.com

https://github.com/openedx/openedx-platform/commit/3a5ac856c79557c5c74d8b3e6578f289d7cceecd

Source: security-advisories@github.com

https://github.com/openedx/openedx-platform/commit/50af17b05d82a8c7e8e690cc2783a8a0ba330bc3

Source: security-advisories@github.com

https://github.com/openedx/openedx-platform/security/advisories/GHSA-6gm5-c49g-p3h9

Source: security-advisories@github.com

https://github.com/openedx/openedx-platform/security/advisories/GHSA-6gm5-c49g-p3h9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.