CVE-2022-31266

Description

In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounts.

Affected Platforms

Weakness Type

CWE-306

References

• https://medium.com/%40bcksec/in-ilias-through-7-10-620c0de685ee
• https://www.bcksec.com/services/
• https://medium.com/%40bcksec/in-ilias-through-7-10-620c0de685ee
• https://www.bcksec.com/services/