CVE-2022-31266

2022-06-2901:15:07

Google

osv.dev

7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.5%

JSON

In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounts.

CPENameOperatorVersion
iliaseq5.3.0beta2
iliaseq7.0_beta1
iliaseq7.4
iliaseq7.5
iliaseq7.0_beta4
iliaseq4.4.4
iliaseq7.7
iliaseq5.2.0beta1
iliaseq7.3
iliaseq7.0

Name	Operator	Version
ilias	eq	5.3.0beta2
ilias	eq	7.0_beta1
ilias	eq	7.4
ilias	eq	7.5
ilias	eq	7.0_beta4
ilias	eq	4.4.4
ilias	eq	7.7
ilias	eq	5.2.0beta1
ilias	eq	7.3
ilias	eq	7.0

Rows per page:

1-10 of 291

References

medium.com/%40bcksec/in-ilias-through-7-10-620c0de685ee

www.bcksec.com/services/