Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/10/08 6:18 p.m.•41 views

CVE-2025-11346

A vulnerability has been found in ILIAS up to 8.23/9.13/10.1. This affects the function unserialize of the component Base64 Decoding Handler. Such manipulation of the argument fsettings leads to deserialization. It is possible to launch the attack remotely. Upgrading to version 8.24, 9.14 and 10....

9.8CVSS6.9AI score0.00443EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/06 8:15 p.m.•22 views

CVE-2025-11346

A vulnerability has been found in ILIAS up to 8.23/9.13/10.1. This affects the function unserialize of the component Base64 Decoding Handler. Such manipulation of the argument fsettings leads to deserialization. It is possible to launch the attack remotely. Upgrading to version 8.24, 9.14 and 10....

9.8CVSS0.00443EPSS
SaveExploits0References5
OSV
OSV
•added 2025/10/06 7:32 p.m.•9 views

CVE-2025-11346 ILIAS Base64 Decoding unserialize deserialization

A vulnerability has been found in ILIAS up to 8.23/9.13/10.1. This affects the function unserialize of the component Base64 Decoding Handler. Such manipulation of the argument fsettings leads to deserialization. It is possible to launch the attack remotely. Upgrading to version 8.24, 9.14 and 10....

5.3CVSS6.2AI score
SaveExploits0References7
CNNVD
CNNVD
•added 2025/10/06 12:00 a.m.•17 views

ILIAS 代码问题漏洞

ILIAS is an open source learning management system from ILIAS Open Source. A code issue vulnerability exists in ILIAS versions 8.23 and earlier, 9.13 and earlier, and 10.1 and earlier, which stems from improper deserialization of the parameter fsettings in the Base64 Decoding Handler component,...

9.8CVSS7.1AI score0.00443EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•2 views

CVE-2025-11346: Deserialization of Untrusted Data

A vulnerability has been found in ILIAS up to 8.23/9.13/10.1. This affects the function unserialize of the component Base64 Decoding Handler. Such manipulation of the argument fsettings leads to deserialization. It is possible to launch the attack remotely. Upgrading to version 8.24, 9.14 and 10....

9.8CVSS5.2AI score0.00443EPSS
SaveExploits0References1
Rows per page
Query Builder