High severity8.8NVD Advisory· Published May 13, 2021· Updated Jun 17, 2026

CVE-2020-23996

Description

A local file inclusion vulnerability in ILIAS before 5.3.19, 5.4.10 and 6.0 allows remote authenticated attackers to execute arbitrary code via the import of personal data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ILIAS/ILIASdescription
Ilias/Iliasllm-fuzzy2 versions
<5.3.19, 5.4.10 and 6.0+ 1 more
- (no CPE)range: <5.3.19, 5.4.10 and 6.0
- cpe:2.3:a:ilias:ilias:*:*:*:*:*:*:*:*range: <5.3.19

Patches

Vulnerability mechanics

References

github.com/ILIAS-eLearning/ILIAS/commit/6717c4ecc6d076154ce185f1ea052f07f37e3537nvdPatchThird Party Advisory
docu.ilias.de/goto_docu_pg_118817_35.htmlnvdRelease NotesVendor Advisory
docu.ilias.de/goto_docu_pg_118823_35.htmlnvdRelease NotesVendor Advisory
docu.ilias.de/goto_docu_pg_122177_35.htmlnvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000