Medium severity5.4NVD Advisory· Published Jun 29, 2023· Updated Jun 17, 2026

CVE-2023-34831

Description

The "Submission Web Form" of Turnitin LTI tool/plugin version 1.3 is affected by HTML Injection attacks. The security issue affects the submission web form ("id" and "title" HTTP POST parameters) where the students submit their reports for similarity/plagiarism checks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Odysseycs/Ithacalabs Turnitin Lti
cpe:2.3:a:odysseycs:ithacalabs_turnitin_lti:1.3:*:*:*:*:*:*:*
Turnitin/LTI tool/plugincpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 1.3

Patches

Vulnerability mechanics

References

github.com/IthacaLabs/Turnitin/blob/main/Turnitin_LTI_1.3_HTMLi_CVE-2023-34831/Turnitin_LTI_1.3_HTMLi_CVE-2023-34831.txtnvdExploitVendor Advisory
github.com/IthacaLabs/Turnitin/blob/main/Turnitin_Submission_Web_Form/nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000