A vulnerability was detected in ILIAS up to 8.23/9.13/10.1. Affected by this vulnerability is an unknown functionality of the component Certificate Import Handler. The manipulation results in Remote Code Execution. The attack may be performed from remote. Upgrading to version 8.24, 9.14 and 10.2 addresses this issue. It is recommended to upgrade the affected component.
References
| Link | Resource |
|---|---|
| https://docu.ilias.de/go/blog/15821/882 | Release Notes Vendor Advisory |
| https://vuldb.com/?ctiid.327229 | Permissions Required VDB Entry |
| https://vuldb.com/?id.327229 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.664889 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
14 Oct 2025, 19:02
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ilias
Ilias ilias |
|
| References | () https://docu.ilias.de/go/blog/15821/882 - Release Notes, Vendor Advisory | |
| References | () https://vuldb.com/?ctiid.327229 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.327229 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.664889 - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:ilias:ilias:8.23:*:*:*:*:*:*:* cpe:2.3:a:ilias:ilias:10.1:*:*:*:*:*:*:* cpe:2.3:a:ilias:ilias:9.13:*:*:*:*:*:*:* |
07 Oct 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-74 |
06 Oct 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-94 |
06 Oct 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-06 19:15
Updated : 2025-10-14 19:02
NVD link : CVE-2025-11344
Mitre link : CVE-2025-11344
CVE.ORG link : CVE-2025-11344
JSON object : View
Products Affected
ilias
- ilias