ILIAS 8.23
Approved changes feed: RSS · Atom
cpe:2.3:a:ilias:ilias:8.23:*:*:*:*:*:*:*
part: a version: 8.23 update: *
| Vendor | Ilias (b0abc309-2b9f-558c-8573-40078ab4e977) |
|---|---|
| Product | Ilias (945b0908-3041-5078-87ec-52b51a8aea59) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/illias-eLearning/illias |
purl2cpe | 2026-06-01 10:12:37.759416 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-11346 |
vulnerable | 2026-06-08 07:02:28.623148 |
ILIAS Base64 Decoding unserialize deserialization
MEDIUM (6.3)
A vulnerability has been found in ILIAS up to 8.23/9.13/10.1. This affects the function unserialize of the component Base64 Decoding Handler. Such manipulation of the argument f_settings leads to deserialization. It is possible to launch the attack remotely. Upgrading to version 8.24, 9.14 and 10.2 is able to mitigate this issue. It is advisable to upgrade the affected component.
Published: 2025-10-06T19:32:05.171Z
Updated: 2026-02-24T06:46:26.247Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11345 |
vulnerable | 2026-06-08 07:02:28.622506 |
ILIAS Test Import unserialize deserialization
MEDIUM (5.5)
A flaw has been found in ILIAS up to 8.23/9.13/10.1. Affected by this issue is the function unserialize of the component Test Import. This manipulation causes deserialization. It is possible to initiate the attack remotely. Upgrading to version 8.24, 9.14 and 10.2 can resolve this issue. Upgrading the affected component is advised.
Published: 2025-10-06T19:02:05.514Z
Updated: 2026-02-24T06:46:15.365Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11344 |
vulnerable | 2026-06-08 07:02:28.620744 |
ILIAS Certificate Import code injection
MEDIUM (6.3)
A vulnerability was detected in ILIAS up to 8.23/9.13/10.1. Affected by this vulnerability is an unknown functionality of the component Certificate Import Handler. The manipulation results in Remote Code Execution. The attack may be performed from remote. Upgrading to version 8.24, 9.14 and 10.2 addresses this issue. It is recommended to upgrade the affected component.
Published: 2025-10-06T18:32:05.924Z
Updated: 2026-02-24T06:46:02.995Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.