ilias.de Vulnerabilities and Affected Products
Vulnerabilities associated with ILIAS Learning Management System.
Products
Clear product- ILIAS Learning Management System1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2020-36944MEDIUM | ILIAS Learning Management System 4.3 - SSRFILIAS Learning Management System 4.3 contains a server-side request forgery vulnerability that allows attackers to read local files through portfolio PDF export functionality. Attackers can inject a script that uses XMLHttpRequest to retrieve local file contents when the portfolio is exported to PDF. CWE-918Jan 28, 2026 | CVSS6.9v4.0 | EPSS0.186% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |