Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rr62-qmpw-4rvq

Опубликовано: 06 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 5.5

Описание

A flaw has been found in ILIAS up to 8.23/9.13/10.1. Affected by this issue is the function unserialize of the component Test Import. This manipulation causes deserialization. It is possible to initiate the attack remotely. Upgrading to version 8.24, 9.14 and 10.2 can resolve this issue. Upgrading the affected component is advised.

A flaw has been found in ILIAS up to 8.23/9.13/10.1. Affected by this issue is the function unserialize of the component Test Import. This manipulation causes deserialization. It is possible to initiate the attack remotely. Upgrading to version 8.24, 9.14 and 10.2 can resolve this issue. Upgrading the affected component is advised.

EPSS

Процентиль: 36%
0.00154
Низкий

5.1 Medium

CVSS4

5.5 Medium

CVSS3

Дефекты

CWE-20
CWE-502

Связанные уязвимости

CVSS3: 5.5
nvd
4 месяца назад

A flaw has been found in ILIAS up to 8.23/9.13/10.1. Affected by this issue is the function unserialize of the component Test Import. This manipulation causes deserialization. It is possible to initiate the attack remotely. Upgrading to version 8.24, 9.14 and 10.2 can resolve this issue. Upgrading the affected component is advised.

EPSS

Процентиль: 36%
0.00154
Низкий

5.1 Medium

CVSS4

5.5 Medium

CVSS3

Дефекты

CWE-20
CWE-502