CVE-2023-36487

CVE-2023-36487 affects ILIAS password reset functionality across ILIAS 7.0 beta1–7.20 and 8.0 beta1–8.1, enabling remote account takeover. The NVD entry lists CVSSv3.1 base score 9.8 (CRITICAL) with network attack vector, no privileges, no user interaction needed, and high impact to confidentiali...