ILIAS 11.5 Security Advisory: Patched Auth RCE, Stored XSS, and Unauth Enumeration

Vulnerability Overview The webpage screenshot displays 19 security issues fixed in ILIAS version 11.5. These issues span multiple areas, including file services, authentication, storage, and user permissions. Affected Areas File Services: Prevention of file suffix bypass (0047077) Authentication: Authentication RCE via test import (0048028), Authentication RCE via CmiXapi (0048072) Storage: Stored XSS in news (0048213), Stored XSS in SCORM tracking reports (0048366), Stored XSS in emails (0048418) User Permissions: Unauthorized enumeration of users and roles via calendar (0043113), RCE in ImageMap questions addressed by removing unnecessary code (0048359), Broken access control in MyStaff (0048362), Anonymous user enumeration via Survey (0048447), Anonymous users can download file objects when public areas are enabled (0048453) Other: Unauthenticated test question rendering (0048252), Forum attachment download process ignores forum binding (0048258), Additional features protected via Write command (0048373), Access checks and filtering added to result functions (0048374), Anonymous test runs protected from access by providing Active ID (0048402), RCE via questionpool questions (0048413), RCE via ImageMap questions (0048414) Remediation File Services: Prevention of file suffix bypass (0047077) Authentication: Authentication RCE via test import (0048028), Authentication RCE via CmiXapi (0048072) Storage: Stored XSS in news (0048213), Stored XSS in SCORM tracking reports (0048366), Stored XSS in emails (0048418) User Permissions: Unauthorized enumeration of users and roles via calendar (0043113), RCE in ImageMap questions addressed by removing unnecessary code (0048359), Broken access control in MyStaff (0048362), Anonymous user enumeration via Survey (0048447), Anonymous users can download file objects when public areas are enabled (0048453) Other: Unauthenticated test question rendering (0048252), Forum attachment download process ignores forum binding (0048258), Additional features protected via Write command (0048373), Access checks and filtering added to result functions (0048374), Anonymous test runs protected from access by providing Active ID (0048402), RCE via questionpool questions (0048413), RCE via ImageMap questions (0048414) POC Code or Exploit Code No specific POC code or exploit code was provided in the page.

Goal Reached Thanks to every supporter — we hit 100%!

ILIAS 11.5 Security Advisory: Patched Auth RCE, Stored XSS, and Unauth Enumeration

More from this source