ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-25268

PoC —
CVSS 3.1
8.8 high
EPSS
2%p83
Published
()
Modified
Description

Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data.

Vendors
ilias
Products
ilias
Weakness
CWE-88
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news

No ingested article mentions this CVE yet.