← All advisories

High severity8.8NVD Advisory· Published Nov 10, 2020· Updated Jun 17, 2026

CVE-2020-25268

CVE-2020-25268

Description

Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data.

Affected products

3

Ilias/Ilias2 versions
cpe:2.3:a:ilias:ilias:6.4.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ilias:ilias:6.4.0:*:*:*:*:*:*:*
- (no CPE)range: =6.4
ILIAS/ILIASdescription

Patches

Vulnerability mechanics

References

1

medium.com/bugbountywriteup/exploiting-ilias-learning-management-system-4eda9e120620nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.