Download & Releases

10.3 (stable)

General Information

Release 10.3 has been published on November 4, 2025

ILIAS is free, open source software and published under the GNU General Public License (GPL), version 3.0  →  Licence

Download

ILIAS-10.3.zip
Download (github.com)
143 MB, 2025-11-04
md5: 2b89f35a05530ececdfdd3756c37ced7

ILIAS-10.3.tar.gz
Download (github.com)
127 MB, 2025-11-04
md5: 8027a34d7289825f6f3d520036dea3ee

Important Changes

  • New Component and Directory Structure
    As part of the implementation of the new component and directory structure in ILIAS 10, the overall file layout has changed significantly. Please note that the webroot is now located in ./public, and this requires an adjustment in your web server configuration.
  • Manage System Styles Removed
    With ILIAS 10, the management of system styles has been discontinued for security reasons. Styles can no longer be edited via the Administration area. For more details, see: https://docu.ilias.de/go/wiki/wpage_8390_1357
  • Support of Subtitles
    SRT subtitle support was changed to VTT subtitle support

Known Issues

  • none

Changed Behaviour

  • Data Collection:
    • The new field type "Copy" was added to the data collection and can now be selected for new fields! A copy field shows a selection of values from another tables entry and copies those to its own value without a reference, making it robust against manipulation and deletion of the origin value.
  • Media objects:
    • We moved to native video tags which do not officially support srt files for subtitles. The supported standard is WebVTT. ILIAS tries to convert srt to vtt on the fly. You will be not able to upoad srt files anymore, please use vtt files instead, see https://mantis.ilias.de/view.php?id=43935
  • Object:
    • Titles and Desciptions will always be interpreted as strings. Contained html-tags are encoded and shown in their literal form.
  • Test & Assessment:
    • Cloze questions do not offer the option to edit gaps in modals anymore. All gaps are available, as previously, underneath the cloze-text input field.
    • Redirect: Starting with Version 10.3, we introduce a separate option to redirect to the logout screen, as redirecting to https://instance.url/logout.php does not work anymore since ILIAS 10.1.

Security Fixes

The following security issues have been fixed. For more information about these vulnerabilities, see our 10.3 security blog post.

#45897: [Media Pools and Media Objects] MediaPool: Open/Unvalidated Redirect (Michael Jansen (Databay AG))
#45899: [¥ UI Components / KS] ilUIPluginRouterGUI: Unauthorized function calls (Ilja Lukin (Fachhochschule Dortmund))
#45898: [Wiki] Wiki: Unauthorized Access to LTI Settings (Ilja Lukin (Fachhochschule Dortmund))
#45938: [General] Query UI: Known vulnerability in version 1.13.1 (XSS)
#45910: [LTI] fix: Verification of LTI Result Service Calls
#45975: [SOAP] Unauthorized function calls (Matthias Stock (Hochschule Bielefeld))

Fixed Issues

The following issues reported in Mantis have been resolved:

#45834: [Chat] Link to Readme from Chat Administration is wrong (mjansen)
#43828: [CSS / Templates] Upper right Icon in Mobile-view: Firefox (catenglaender)
#42721: [File] Failed test: Fortfahren gemäß manuell gesetztem Lernfortschritt (rklees)
#45693: [Item Groups] Actions dropdown of non-container objects is indented (tjoussen)
#45953: [Learning Module SCORM 2004] User data is lost if "enable storing data without session" is disabled. (qualitus.hartwig)
#45903: [Legal Documents, Terms of Service and Data Protection] Different display of legal document links in footer for logged-in and not-logged-in user (lscharmer)
#45798: [Login, Auth & Registration] No error message upon inserting wrong current password during new installation (mjansen)
#45913: [MathJax] MathJax does not render on v10 test platforms (fneumann)
#45980: [Poll] Error "Call to a member function serialize() on null" during migration ilPollImagesMigration (smeyer)
#45886: [Search] Dateitypen-Filter in der Suche (tschmitz)
#33354: [Test & Assessment] Participants Answers: Locking Answers (conceptual issues) (tjoussen)
#45853: [Test & Assessment] Using Autosave leads to incorrect answers and missing text inputs (skergomard)
#45860: [Test & Assessment] Import of questions from ZIP-file not allowed for application/x-zip-compressed (skergomard)
#45915: [Test & Assessment] Error when running cron job "Delete Trash Bin": Call to undefined method ilObjQuestionPool::getAllQuestions() (tjoussen)
#45947: [Test & Assessment] Question in a question pool gives error: "Call to a member function getGuiClassName() on null" (skergomard)
#45972: [Test & Assessment] Settings cannot be saved (due to change of locking options) (skergomard)
#45880: [User Service] Error in Cron Job "Delete inactivated user accounts": Call to undefined method ilDBPdoMySQLInnoDB::fetchRow() (skergomard)
#45937: [User Service] User confirmation throws: SQLSTATE[42000]: Syntax error or access violation: 1064 error in SQL syntax (skergomard)
#45478: [¥ UI Components / KS] Nested accordeons do not work - content in panels not shown on click (akill)
#44784: [¥ UI Core] Out-dated reference to library jquery-migrate (smeyer)
#44785: [¥ UI Core] Out-dated reference to library jquery-ui (smeyer)