← Back to CVEs
CVE-2020-25268
HIGH8.8
Description
Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data.
CVE Details
CVSS v3.1 Score8.8
SeverityHIGH
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack VectorNETWORK
ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
Published11/10/2020
Last Modified11/21/2024
Sourcenvd
Honeypot Sightings0
Affected Products
ilias:ilias
Weaknesses (CWE)
CWE-88
References
https://medium.com/bugbountywriteup/exploiting-ilias-learning-management-system-4eda9e120620(cve@mitre.org)
https://medium.com/bugbountywriteup/exploiting-ilias-learning-management-system-4eda9e120620(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.