← Back

CVE-2023-32778

nvd nist
Published: Sep 14, 2026Modified: Sep 22, 2026Deferred

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
Exploitability: 0.7 / Impact: 2.5
Source: MITRE (Secondary)

Description

An issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.1. An attacker can execute arbitrary code via ZIP upload.

Related CWEs

CWE-23
Relative Path Traversal
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

References (2)

Source: cve@mitre.org
Source: cve@mitre.org

Timeline

No history available yet.