Security-Blog
ILIAS 9.21
Following 6 security issues have been resolved:
0046642: Data Collection: Stored XSS with TinyMCE
0047800: Stored XSS via HTML attribute injection
0047834: Add RBAC check for Repository Objects
0047887: SOAP: Insecure Direct Object Reference (IDOR)
0047952: Object: Remove Information on Temp File Location from Error Message
0047954: Notes: Insufficient access checks
Affected Version(s) | 9.20 |
Fixed Version(s) | 9.21 |
CVSS Score 4.0 | 7.3 |
Reported By | - |
Affected Version(s) | 9.20, 10.8, 11.1 |
Fixed Version(s) | 9.21, 10.9, 11.2, 12.0 Alpha |
CVSS Score 4.0 | 8.5 |
Reported By | André Schweigert ( FAU | ILIAS ) |
Affected Version(s) | 9.20, 10.8, 11.1 |
Fixed Version(s) | 9.21, 10.9, 11.2, 12.0 Alpha |
CVSS Score 4.0 | 6.3 |
Reported By | Franziska Senze |
Affected Version(s) | 9.20, 10.8, 11.1 |
Fixed Version(s) | 9.21, 10.9, 11.2, 12.0 Alpha |
CVSS Score 4.0 | 7.5 |
Reported By | - |
Affected Version(s) | 9.20, 10.8, 11.1 |
Fixed Version(s) | 9.21, 10.9, 11.2, 12.0 Alpha |
CVSS Score 4.0 | 5.3 |
Reported By | - |
Affected Version(s) | 9.20, 10.8, 11.1 |
Fixed Version(s) | 9.21, 10.9, 11.2, 12.0 Alpha |
CVSS Score 4.0 | 5.3 |
Reported By | - |