CVE-2024-33527: XSS

Q: What is the severity of CVE-2024-33527?

CVE-2024-33527 is classified as a high severity vulnerability due to its potential for allowing remote attackers to inject malicious scripts.

Q: How do I fix CVE-2024-33527?

To fix CVE-2024-33527, you should update ILIAS to version 7.30 or later for ILIAS 7, and to version 8.11 or later for ILIAS 8.

Q: Who is affected by CVE-2024-33527?

CVE-2024-33527 affects remote authenticated users with administrative privileges in ILIAS versions before 7.30 and 8.11.

Q: What type of vulnerability is CVE-2024-33527?

CVE-2024-33527 is a Stored Cross-site Scripting (XSS) vulnerability.

Q: What feature is vulnerable in CVE-2024-33527?

The vulnerability is in the "Import of Users and login name of user" feature of ILIAS.

Published May 21, 2024

Updated

A Stored Cross-site Scripting (XSS) vulnerability in the "Import of Users and login name of user" feature in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with administrative privileges to inject arbitrary web script or HTML via XML file upload.

Affected Software

4 affected components

ILIAS ILIAS<7.30

ILIAS ILIAS<8.11

ILIAS ILIAS>=7.0<7.30

ILIAS ILIAS>=8.0<8.11

Remediation

Patch Available

https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&cmd=layout&ref_id=1719&obj_id=170029

Event History

Jan 1, 1970

CVE Published

via MITRE·12:00 AM

May 21, 2024

CVE Published

via NVD·03:15 PM

Nov 7, 2024

Data Sourced

via MITRE·04:42 PM

Description

Frequently Asked Questions

What is the severity of CVE-2024-33527?

CVE-2024-33527 is classified as a high severity vulnerability due to its potential for allowing remote attackers to inject malicious scripts.

How do I fix CVE-2024-33527?