Loading vulnerability details…
CVSS v3.1
4.3
EPSS
0.82%
Published
Jun 28, 2022
Modified
Mar 20, 2025
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounts.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NWeaknesses (CWE)
Affected Products (1)
References (4)