Security-Blog
ILIAS 9.23
Following 6 security issues have been resolved:
0046342: Membership: Potential unauthenticated access by anonymous
0047936: Learning Progress: Unauthenticated access to general course information
0048009: SOAP: Authenticated arbitrary file read
0048260: Group: Missing permission checks in groups
0048264: SCORM 1.2: Missing authorisation in ilObjSAHSLearningModuleGUI for uploads in SCORM
0048265: File: Unauthorized Upload of Files
Affected Version(s) | 9.22, 10.10, 11.3 |
Fixed Version(s) | 9.23, 10.11, 11.4, 12.0 Alpha |
CVSS Score 4.0 | 2.1 |
Reported By | Jens Weber (Universität Bern) |
Affected Version(s) | 9.22, 10.10, 11.3 |
Fixed Version(s) | 9.23, 10.11, 11.4, 12.0 Alpha |
CVSS Score 4.0 | 6.9 |
Reported By |
Affected Version(s) | 9.22, 10.9, 11.2 |
Fixed Version(s) | 9.23, 10.10, 11.3, 12.0 Alpha |
CVSS Score 4.0 | 8.7 |
Reported By | André Schweigert (FAU|ILIAS) |
Affected Version(s) | 9.22, 10.10, 11.3 |
Fixed Version(s) | 9.23, 10.11, 11.4, 12.0 Alpha |
CVSS Score 4.0 | 5.3 |
Reported By |
Affected Version(s) | 9.22, 10.10, 11.3 |
Fixed Version(s) | 9.23, 10.11, 11.4, 12.0 Alpha |
CVSS Score 4.0 | 9.2 |
Reported By | Manuel Kurz (Bundesverwaltungsamt – Team eCampus) |
Affected Version(s) | 9.22, 10.10, 11.3 |
Fixed Version(s) | 9.23, 10.11, 11.4, 12.0 Alpha |
CVSS Score 4.0 | 9.1 |
Reported By | Manuel Kurz (Bundesverwaltungsamt – Team eCampus) |