Download & Releases

10.2 (stable)

General Information

Release 10.2 has been published on September 23, 2025

ILIAS is free, open source software and published under the GNU General Public License (GPL), version 3.0  →  Licence

Download

ILIAS-10.2.zip
Download (github.com)
142 MB, 2025-09-23
md5: d866e6ed894c2ef26d2a0da7a2bf81d8

ILIAS-10.2.tar.gz
Download (github.com)
127 MB, 2025-05-23
md5: 83e7289f9fe603617f9600d0709d4a27

Important Changes

  • New Component and Directory Structure
    As part of the implementation of the new component and directory structure in ILIAS 10, the overall file layout has changed significantly. Please note that the webroot is now located in ./public, and this requires an adjustment in your web server configuration.
  • Manage System Styles Removed
    With ILIAS 10, the management of system styles has been discontinued for security reasons. Styles can no longer be edited via the Administration area. For more details, see: https://docu.ilias.de/go/wiki/wpage_8390_1357
  • Support of Subtitles
    SRT subtitle support was changed to VTT subtitle support

Known Issues

  • none

Changed Behaviour

  • Data Collection:
    • The new field type "Copy" was added to the data collection and can now be selected for new fields! A copy field shows a selection of values from another tables entry and copies those to its own value without a reference, making it robust against manipulation and deletion of the origin value.
  • Media objects:
    • We moved to native video tags which do not officially support srt files for subtitles. The supported standard is WebVTT. ILIAS tries to convert srt to vtt on the fly. You will be not able to upoad srt files anymore, please use vtt files instead, see https://mantis.ilias.de/view.php?id=43935
  • Object:
    • Titles and Desciptions will always be interpreted as strings. Contained html-tags are encoded and shown in their literal form.
  • Test:
    • Cloze questions do not offer the option to edit gaps in modals anymore. All gaps are available, as previously, underneath the cloze-text input field.

Security Fixes

The following security issues have been fixed. For more information about these vulnerabilities, see our 10.2 security blog post.

#45633: [Test & Assessment] Stored XSS in Question Pool (Matheus Zych (Databay AG))
#45635: [General] WOPI: Open Redirect (Michael Jansen (Databay AG))
#45738: [Certificate]: Unauthenticated Remote Code Execution (Florian Wilkens (SRLabs Researchers))
#45744: [Test & Assessment] Unsafe operation during import (Florian Wilkens (SRLabs Researchers))
#45745: [Certificate]: Unsanitized SVG Files in Import (David Tokar (WEKA Media GmbH & Co. KG))
#45752: [Test & Assessment] Authenticated RCE über unsichere Deserialisierung (Florian Wilkens (SRLabs Researchers))
#45776: [Rating] Missing CSRF Token in Rating request (Michael Jansen)
#45777: [Data Collection] Open/Unvalidated Redirect in DataCollections (Michael Jansen)
#45801: [Test & Assessment]: Fixes Wrong Access Right Check and Route From Test to Question (Ilja Lukin (FH Dortmund))

Fixed Issues

The following issues reported in Mantis have been resolved:

#45524: [CSS / Templates] Drop-down "More Styles for Characters" hides behind Main Bar (catenglaender)
#45586: [Online Help] Online Texte können nur einer ScreenID zugewiesen werden (akill)
#45494: [Rating] teilweise gefüllte Rating-Angaben verhalten sich fehlerhaft (fhelfer)
#43391: [Style – Content Style] Error when trying to modify any style class (akill)
#45588: [Test & Assessment] Question list and test overview are not consistent (skergomard)
#45669: [Test & Assessment] No conversion of Latex Code in Multiple Choice Question (fneumann)
#45672: [Test & Assessment] Mode for 'Scoring Multiple Passes' cannot be toggled with results present (skergomard)
#45737: [Test & Assessment] Long Menu questions: Cannot add answers (skergomard)
#45750: [Test & Assessment] Error message when trying to access 'Ranking' subtab after having changed gamification settings. (skergomard)
#45771: [Test & Assessment] Essay Question: Save Button does not work (skergomard)
#45820: [Test & Assessment] 'Manual Scoring by Question' does not allow negative 'Points for the Answer' entries (skergomard)
#45762: [User Service] LDAP Cron funktioniert nicht mehr (skergomard)
#45388: [¥ Global Screen Service] Failed test: "Read only" für Administration – Footer administration (fschmid)
#45795: [¥ Object] Test: \ilObjectTest::testCreationDeletion fails depending on execution order (skergomard)
#45536: [¥ UI Components / KS] Pagination ViewControl: Do not show disabled next and back buttons (catenglaender)