Download & Releases

10.4 (stable)

General Information

Release 10.4 has been published on December 16, 2025

ILIAS is free, open source software and published under the GNU General Public License (GPL), version 3.0  →  Licence

Download

ILIAS-10.4.zip
Download (github.com)
143 MB, 2025-12-16
md5: b52f7968fc1f25550b765a73315a2707

ILIAS-10.4.tar.gz
Download (github.com)
127 MB, 2025-12-16
md5: ad42f52bc078e1689d2374391ce96646 

Important Changes

  • New Component and Directory Structure
    As part of the implementation of the new component and directory structure in ILIAS 10, the overall file layout has changed significantly. Please note that the webroot is now located in ./public, and this requires an adjustment in your web server configuration.
  • Manage System Styles Removed
    With ILIAS 10, the management of system styles has been discontinued for security reasons. Styles can no longer be edited via the Administration area. For more details, see: https://docu.ilias.de/go/wiki/wpage_8390_1357
  • Support of Subtitles
    SRT subtitle support was changed to VTT subtitle support

Known Issues

  • none

Changed Behaviour

  • Data Collection:
    • The new field type "Copy" was added to the data collection and can now be selected for new fields! A copy field shows a selection of values from another tables entry and copies those to its own value without a reference, making it robust against manipulation and deletion of the origin value.
  • Media objects:
    • We moved to native video tags which do not officially support srt files for subtitles. The supported standard is WebVTT. ILIAS tries to convert srt to vtt on the fly. You will be not able to upoad srt files anymore, please use vtt files instead, see https://mantis.ilias.de/view.php?id=43935
  • Object:
    • Titles and Desciptions will always be interpreted as strings. Contained html-tags are encoded and shown in their literal form.
  • Test & Assessment:
    • Cloze questions do not offer the option to edit gaps in modals anymore. All gaps are available, as previously, underneath the cloze-text input field.
    • Redirect: Starting with Version 10.3, we introduce a separate option to redirect to the logout screen, as redirecting to https://instance.url/logout.php does not work anymore since ILIAS 10.1.

Security Fixes

The following security issues have been fixed. For more information about these vulnerabilities, see our 10.4 security blog post.

#45883: [Background Tasks] BackgroundTasks: Missind CSRF token for two commands in ilBTControllerGUI (Michael Jansen (Databay AG))
#45884: [Background Tasks] BackgroundTasks: Open redirect in ilBTControllerGUI (Michael Jansen (Databay AG))
#45900: [Background Tasks] BackgroundTasks: Unauthorized deletion of tasks (Ilja Lukin (Fachhochschule Dortmund))
#45905: [¥ Object] Repository: Stored XSS via SVG file upload of custom icons
#46496: [SOAP & Webservices] ilServer: Apache Tika multiple XXE vulnerabilities (CVE-2025-66516)
#46023: [SOAP & Webservices] SOAP: Unauthorized function calls (André Schweigert (FAU|ILIAS))
#46024: [SOAP & Webservices] SOAP: Unauthorized data exposure (André Schweigert (FAU|ILIAS))
#46025: [SOAP & Webservices] SOAP: Missing source permission check (André Schweigert (FAU

Fixed Issues

The following issues reported in Mantis have been resolved:

#43780: [Accessibility / WCAG Issues] Missing aria-describedby with form element “Select files” in new text exercise unit (amstutz)
#44429: [Calendar] Failed test: Neuen Termin anlegen | Autovervollständigung funktioniert nicht (smeyer)
#45847: [Data Collection] Import of data collection from ILIAS 9 does not work properly. (iszmais)
#46043: [Data Collection] Failed test: Datensammlung online setzen (iszmais)
#46380: [Data Collection] Orphaned Code + Language Variable: dcl_msg_tableviews_order_updated (iszmais)
#45986: [Didactic Templates] Folder types cannot be changed once the default has been set (smeyer)
#45974: [Exercise] Error "Call to a member function getTitle() on null" when deleting user accounts (akill)
#46222: [Glossary] Failed test: Begriff hinzufügen (akill)
#45896: [ILIAS Page Editor] Insert Interactive-Image, 'Attempt to read property "nodeName" on null' (akill)
#44894: [Language Handling] Sprachvariablen "exp_public_access" und "export_info_public_access" umbenennen (mkunkel)
#44908: [Language Handling] Kontakt OAI-PMH Schnittstelle ändern (mkunkel)
#46214: [Language Handling] Name des Repositoriums --> Name der Installation (mkunkel)
#46361: [Language Handling] Italian translation in lang var "cont_ed_item_up" causes page editor to crash. (fwolf)
#46403: [Logging] Error thrown with click on "Log" under tab "Permissions" (skergomard)
#46110: [Login, Auth & Registration] Failed test: Anzahl von Anmeldeversuchen begrenzen (n=1) (mjansen)
#45770: [News] ilNewsRendererFactory does not find specific renderers (tjoussen)
#46200: [Online Help] Screen ID mit "\" im Namen lassen sich nicht nutzen (akill)
#46255: [Online Help] Manche Screen ID funktionieren nicht (Alexandra)
#46357: [Personal Profile] Failed test: Visitenkarte des Profils herunterladen (skergomard)
#46224: [Precondition Handling] Failed test: Bedingungen des Tests ändern (akill)
#45368: [SOAP & Webservices] ilSoapUserAdministration::importUsers crashes because undefined method used (ahmed)
#45379: [Test & Assessment] Info line variable used twice in Settings? (tjoussen)
#45598: [Test & Assessment] Corrections: Entering non-numeric characters for 'Points' results in Whoops error (tjoussen)
#45659: [Test & Assessment] A crash may occur when a test is worked upon in two tabs and the time limit runs out (probably asynchronously) (tjoussen)
#46002: [Test & Assessment] Unable to add question from pool or test. Unable to start test for user. (=> error) (tjoussen)
#46026: [Test & Assessment] Test: Error when exporting results via plugin (tjoussen)
#46037: [Test & Assessment] Importing Test-XML into Pool fails (skergomard)
#46128: [Test & Assessment] KPrim Bildupload ist ein wenig durcheinander (skergomard)
#46198: [Test & Assessment] Update von ILIAS 9 auf ILIAS 10 scheitert an Fehler in Test10DBUpdateSteps (skergomard)
#46216: [Test & Assessment] File Upload Question - no access to uploaded file(s) during manual correction in "Scoring by Question"-mode (tjoussen)
#46218: [Test & Assessment] Fehler markieren-Frage/Error text-Question: Markierungen werden aufgehoben beim markieren/demarkieren der Frage/ Flags get lost (skergomard)
#46384: [Test & Assessment] Error "Undefined array key "lock_answer_on_next_question"" when saving Test settings (skergomard)
#46434: [Test & Assessment] Trying to export data for 'Scored Test Attempt' (Excel) of a certain test throws fatal TypeError (skergomard)
#46106: [User Service] Failed test: Rollenbasierte Startseite auf 'Kalender mit bestimmter Ansicht' ändern (skergomard)
#46423: [User Service] Change owner in ilPermissionGUI has a broken autocomplete function (skergomard)
#45574: [¥ Object] Import of LSO fails with ILIAS\Filesystem\Exception\DirectoryNotFoundException (cludolf)
#44789: [¥ UI Core] Out-dated reference to library yahoo-dom-event (tfuhrer)
#44790: [¥ UI Core] Out-dated reference to library connection-min (tfuhrer)