Design/Logic Flaw

2022-06-2901:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.5%

In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounts.

CPENameOperatorVersion
iliasle7.10

CPE	Name	Operator	Version
	ilias	le	7.10

References

medium.com/%40bcksec/in-ilias-through-7-10-620c0de685ee

www.bcksec.com/services/