CVE-2024-33529
HIGH 7.2EPSS 0.9%
ILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS 9.0 allow remote authenticated attackers with administrative privileges to execute operating system commands via file uploads with dangerous types.
- CVSS v3.1 CNA
- 7.2 HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.90% chance of exploitation in the next 30 days, 59th percentile
- Published
- 2024-05-21
- Updated
- 2025-03-28
Proof-of-concept exploits (1)
Security advisories
- https://insinuator.net/2024/05/security-advisory-achieving-php-code-execution-in-ilias-el…
- https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&cmd=layout&ref_id=1719&obj_…