CVE-2023-36484

ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting XSS...

Cross site scripting

ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting XSS...

CVE-2023-36487

The password reset function in ILIAS 7.0beta1 through 7.20 and 8.0beta1 through 8.1 allows remote attackers to take over the account...

CVE-2023-36488

ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to stored Cross Site Scripting XSS...

CVE-2023-36487

The password reset function in ILIAS 7.0beta1 through 7.20 and 8.0beta1 through 8.1 allows remote attackers to take over the account...

Design/Logic Flaw

The password reset function in ILIAS 7.0beta1 through 7.20 and 8.0beta1 through 8.1 allows remote attackers to take over the account...

Cross site scripting

ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to stored Cross Site Scripting XSS...

CVE-2023-36484

ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting XSS...

ILIAS 安全漏洞

ILIAS is an open source learning management system. A security vulnerability exists in ILIAS versions 7.0beta1 through 7.20 and 8.0beta1 through 8.1, which stems from a password reset feature that allows a remote attacker to take over an account...

CVE-2023-36487

CVE-2023-36487 affects ILIAS password reset functionality across ILIAS 7.0 beta1–7.20 and 8.0 beta1–8.1, enabling remote account takeover. The NVD entry lists CVSSv3.1 base score 9.8 (CRITICAL) with network attack vector, no privileges, no user interaction needed, and high impact to confidentiali...

PT-2023-25590 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS versions 7.21 through 8.2 Description: The issue concerns stored Cross Site Scripting XSS, which is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized...

CVE-2023-36484

ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting XSS...

CVE-2023-36488

CVE-2023-36488 affects ILIAS 7.21 and 8.0_beta1 through 8.2, with a stored Cross Site Scripting (XSS) vulnerability. The connected documents confirm the affected versions and vulnerability class but do not provide specific root cause details or a confirmed remediation/patch version. No exploit de...

CVE-2023-36488

ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to stored Cross Site Scripting XSS...

CVE-2023-36484

ILIAS 7.21 and 8.0_beta1 through 8.2 are affected by a reflected Cross-Site Scripting (XSS) vulnerability. Evidence across CVE-2023-36484 entries (Red Hat, NVD, OSV, CNNVD, PT-Security) confirms the impacted versions and the XSS class, with a CVSSv3.1 base score of 6.1 (Network attack, User Inter...

ILIAS 跨站脚本漏洞

ILIAS is an open source learning management system. A security vulnerability exists in ILIAS versions 7.21, 8.0beta1, and 8.2 that stems from susceptibility to stored cross-site scripting XSS attacks...

CVE-2023-36487

The password reset function in ILIAS 7.0beta1 through 7.20 and 8.0beta1 through 8.1 allows remote attackers to take over the account...

CVE-2023-36488

ILIAS 7.21 and 8.0beta1 through 8.2 is vulnerable to stored Cross Site Scripting XSS...

PT-2023-25588 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS versions 7.21 through 8.2 Description: The issue is related to reflected Cross-Site Scripting XSS, which allows an attacker to inject malicious scripts into a website. This can lead to unauthorized access to user data or session...

PT-2023-25589 · Ilias · Ilias

Name of the Vulnerable Software and Affected Versions: ILIAS versions 7.0 beta1 through 7.20 ILIAS versions 8.0 beta1 through 8.1 Description: The password reset function allows remote attackers to take over the account. Recommendations: For ILIAS versions 7.0 beta1 through 7.20, consider disabli...