Lucene search

GoogleOSV:CVE-2022-45916

HistoryDec 07, 2022 - 1:15 a.m.

CVE-2022-45916

2022-12-0701:15:11

Google

osv.dev

ilias

7.16

xss

vulnerability

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.8%

JSON

ILIAS before 7.16 allows XSS.

CPENameOperatorVersion
iliaseq5.3.0beta2
iliaseq7.13
iliaseq7.0_beta1
iliaseq7.4
iliaseq7.14
iliaseq7.5
iliaseq7.0_beta4
iliaseq4.4.4
iliaseq7.7
iliaseq5.2.0beta1

Name	Operator	Version
ilias	eq	5.3.0beta2
ilias	eq	7.13
ilias	eq	7.0_beta1
ilias	eq	7.4
ilias	eq	7.14
ilias	eq	7.5
ilias	eq	7.0_beta4
ilias	eq	4.4.4
ilias	eq	7.7
ilias	eq	5.2.0beta1

Rows per page:

1-10 of 341

References

packetstormsecurity.com/files/170181/ILIAS-eLearning-7.15-Command-Injection-XSS-LFI-Open-Redirect.html

seclists.org/fulldisclosure/2022/Dec/7

sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-ilias-elearning-platform/