Summary
Ein entfernter Angreifer kann mehrere Schwachstellen in ILIAS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und Sicherheitsmaßnahmen zu umgehen.
Product
ILIAS ist eine Open Source e-Learning Lösung.
Vulnerabilities 3
-
Unscored —
ILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting (XSS).
-
Unscored —
The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take o…
-
Unscored —
ILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to stored Cross Site Scripting (XSS).
Revision history
-
#1
Initiale Fassung
References
-
Github Advisory Database vom 2023-06-29
https://github.com/advisories/GHSA-v5mf-vjw2-x655
-
Github Advisory Database vom 2023-06-29
https://github.com/advisories/GHSA-cpqm-vp2r-5676
-
Github Advisory Database vom 2023-06-29
https://github.com/advisories/GHSA-7h3x-674f-mjp9