The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account.

参照URL

• advisory github.com
• advisory nvd.nist.gov
• web docu.ilias.de
• web docu.ilias.de