← All advisories

Medium severity6.5NVD Advisory· Published Dec 7, 2022· Updated Jun 17, 2026

CVE-2022-45918

CVE-2022-45918

Description

ILIAS before 7.16 allows External Control of File Name or Path.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Ilias/Ilias3 versions
cpe:2.3:a:ilias:ilias:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ilias:ilias:*:*:*:*:*:*:*:*range: <7.16
- (no CPE)range: <7.16
- (no CPE)

Patches

Vulnerability mechanics

References

3

packetstormsecurity.com/files/170181/ILIAS-eLearning-7.15-Command-Injection-XSS-LFI-Open-Redirect.htmlnvdExploitThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2022/Dec/7nvdExploitMailing ListThird Party Advisory
sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-ilias-elearning-platform/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.