Lucene search

GoogleOSV:CVE-2022-45918

HistoryDec 07, 2022 - 1:15 a.m.

CVE-2022-45918

2022-12-0701:15:11

Google

osv.dev

ilias software

cve-2022-45918

file path control

6.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.2%

JSON

ILIAS before 7.16 allows External Control of File Name or Path.

CPENameOperatorVersion
iliaseq5.3.0beta2
iliaseq7.13
iliaseq7.0_beta1
iliaseq7.4
iliaseq7.14
iliaseq7.5
iliaseq7.0_beta4
iliaseq4.4.4
iliaseq7.7
iliaseq5.2.0beta1

Name	Operator	Version
ilias	eq	5.3.0beta2
ilias	eq	7.13
ilias	eq	7.0_beta1
ilias	eq	7.4
ilias	eq	7.14
ilias	eq	7.5
ilias	eq	7.0_beta4
ilias	eq	4.4.4
ilias	eq	7.7
ilias	eq	5.2.0beta1

Rows per page:

1-10 of 341

References

packetstormsecurity.com/files/170181/ILIAS-eLearning-7.15-Command-Injection-XSS-LFI-Open-Redirect.html

seclists.org/fulldisclosure/2022/Dec/7

sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-ilias-elearning-platform/