← All advisories

Medium severity4.3NVD Advisory· Published Jun 21, 2022· Updated Jun 17, 2026

CVE-2022-31478

CVE-2022-31478

Description

The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function.

Affected products

3

ILIAS/UserTakeOver plugindescription
Srsolutionsag/UserTakeOverllm-create
Range: <4.0.1
Ilias/Iliasllm-fuzzy
Range: <4.0.1

Patches

Vulnerability mechanics

References

1

medium.com/%40bcksec/ilias-lms-usertakeover-4-0-1-vulnerability-b2824679403nvd

News mentions

0

No linked articles in our index yet.