Vulnerabilidades de Ilias.de
CVEs publicadas que afetam produtos de Ilias.de: 1 registro(s), com severidade, exploração e correções.
CVE-2020-36944
Baixa · 3.3
CWE-918 28/01/2026
ILIAS Learning Management System 4.3 - SSRF
ILIAS Learning Management System 4.3 contains a server-side request forgery vulnerability that allows attackers to read local files through portfolio PDF export functionality. Attackers can inject a script that uses XMLHttpRequest to retrieve local file contents when the portfolio is exported to PDF.