CVE-2023-36484

Published: Jun 29, 2023Modified: Nov 21, 2024

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

ILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting (XSS).

Affected (6)

Products: Ilias: Ilias

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ilias Ilias	From 8.0 to 8.2
Ilias Ilias	Version 7.21
Ilias Ilias	Version 8.0 beta1
Ilias Ilias	Version 8.0 beta2
Ilias Ilias	Version 8.0 beta3
Ilias Ilias	Version 8.0 beta4

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (4)

https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141710&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI

Source: cve@mitre.org

Release Notes

https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141711&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI

Source: cve@mitre.org

Release Notes

https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141710&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI

Source: af854a3a-2127-422b-91ae-364da2661108

Release Notes

https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141711&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI

Source: af854a3a-2127-422b-91ae-364da2661108

Release Notes

Timeline

No history available yet.