CVE-2023-36484

ILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting (XSS).

CVSS v3 6.1 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141710&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI	Release Notes
https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141711&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI	Release Notes

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ilias:ilias::::::::
	cpe:2.3:a:ilias:ilias:7.21:::::::*
	cpe:2.3:a:ilias:ilias:8.0:beta1::::::
	cpe:2.3:a:ilias:ilias:8.0:beta2::::::
	cpe:2.3:a:ilias:ilias:8.0:beta3::::::
	cpe:2.3:a:ilias:ilias:8.0:beta4::::::

History

07 Jul 2023, 16:46

Type	Values Removed	Values Added
First Time		Ilias Ilias ilias
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.1
CPE		cpe:2.3:a:ilias:ilias:8.0:beta4:::::: cpe:2.3:a:ilias:ilias:7.21:::::::* cpe:2.3:a:ilias:ilias:8.0:beta1:::::: cpe:2.3:a:ilias:ilias:8.0:beta2:::::: cpe:2.3:a:ilias:ilias:8.0:beta3:::::: cpe:2.3:a:ilias:ilias::::::::
CWE		CWE-79
References	~~(MISC) https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141710&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI -~~	(MISC) https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141710&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI - Release Notes
References	~~(MISC) https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141711&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI -~~	(MISC) https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141711&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI - Release Notes

29 Jun 2023, 19:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-06-29 19:15

Updated : 2024-02-28 20:13

NVD link : CVE-2023-36484

Mitre link : CVE-2023-36484

CVE.ORG link : CVE-2023-36484

JSON object : View

Products Affected

ilias

ilias

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

6.1 /10