CVE-2022-31266

CVE-2022-31266

EPSS 0.7%

In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounts.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://medium.com/%40bcksec/in-ilias-through-7-10-620c0de685ee https://www.bcksec.com/services/