CVE-2025-11345
ILIAS Test Import unserialize deserialization
概要
ILIAS Test Import unserialize deserialization
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A flaw has been found in ILIAS up to 8.23/9.13/10.1. Affected by this issue is the function unserialize of the component Test Import. This manipulation causes deserialization. It is possible to initiate the attack remotely. Upgrading to version 8.24, 9.14 and 10.2 can resolve this issue. Upgrading the affected component is advised.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- report vuldb.com
- web docu.ilias.de
- web srlabs.de