The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function.

Published Jun 21, 2022 · Updated Aug 3, 2024 · Assigned by mitre