Arbitrary Code Execution Vulnerability in ILIAS by ILIAS Development Team
CVE-2023-32778

3.3LOW

Key Information:

Vendor

Ilias

Status
Ilias
Vendor
CVE Published:
14 September 2026

What is CVE-2023-32778?

A security issue has been found in ILIAS versions 6.23, 7 prior to 7.22, and 8.1. This vulnerability allows an attacker to execute arbitrary code through a malicious ZIP file upload. The flaw poses significant risks as it could enable unauthorized access and manipulation of the system, potentially compromising sensitive data and functionalities. Users are urged to update to the latest versions to mitigate these risks.

Affected Version(s)

ILIAS 6.23

ILIAS 7 < 7.22

ILIAS 8.1

References

https://docu.ilias.de/goto.php?target=wiki_5307&client_id...
https://docu.ilias.de/goto_docu_pg_141704_35.html

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.