Reflected Cross-Site Scripting Vulnerability in ILIAS by ILIAS Project
CVE-2023-36484

6.1MEDIUM

Key Information:

Vendor

Ilias

Status
Ilias
Vendor
CVE Published:
29 June 2023

What is CVE-2023-36484?

ILIAS versions 7.21 and 8.0_beta1 through 8.2 are susceptible to reflected Cross-Site Scripting vulnerabilities, allowing an attacker to execute arbitrary scripts in the context of a user's session. This can lead to unauthorized data access or manipulation, posing a significant risk to user data integrity and privacy. It is crucial for users of these versions to apply security patches and updates to mitigate potential exploitation.

References

https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141710...
https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141711...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.