CVE-2020-23995

Affected software/versions: ILIAS before 5.3.19, 5.4.12, and 6.0. Vulnerability: Information disclosure via a workspace upload that lets remote authenticated attackers obtain the upload data path. Root cause details are not explicitly stated in the provided documents. Impact: Partial confidential...