Medium severity5.5NVD Advisory· Published Oct 6, 2025· Updated Jun 17, 2026

CVE-2025-11345

Description

A flaw has been found in ILIAS up to 8.23/9.13/10.1. Affected by this issue is the function unserialize of the component Test Import. This manipulation causes deserialization. It is possible to initiate the attack remotely. Upgrading to version 8.24, 9.14 and 10.2 can resolve this issue. Upgrading the affected component is advised.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ilias/Ilias5 versions
cpe:2.3:a:ilias:ilias:10.1:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:ilias:ilias:10.1:*:*:*:*:*:*:*
- cpe:2.3:a:ilias:ilias:8.23:*:*:*:*:*:*:*
- cpe:2.3:a:ilias:ilias:9.13:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <=8.23, <=9.13, <=10.1

Patches

Vulnerability mechanics

References

docu.ilias.de/go/blog/15821/882nvdRelease NotesVendor Advisory
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdPermissions RequiredVDB Entry
srlabs.de/blog/breaking-ilias-part-2-three-to-rcenvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000