CVE-2024-33529

2024-05-2115:15:29

[email protected]

web.nvd.nist.gov

ilias 7

ilias 8

ilias 9

remote attacker

admin rights

os commands

unsafe file uploads

7 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

ILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS 9.0 allow remote authenticated attackers with administrative privileges to execute operating system commands via file uploads with dangerous types.

References

docu.ilias.de/ilias.php?baseClass=illmpresentationgui&cmd=layout&ref_id=1719&obj_id=170040

insinuator.net/2024/05/security-advisory-achieving-php-code-execution-in-ilias-elearning-lms-before-v7-30-v8-11-v9-1/