CVE-2024-33529: OS Command Injection

Q: What is the severity of CVE-2024-33529?

CVE-2024-33529 is classified as a high severity vulnerability due to its potential for remote command execution by authenticated attackers.

Q: How do I fix CVE-2024-33529?

To fix CVE-2024-33529, upgrade ILIAS to version 7.30 or later, or 8.11 or later, or make sure to apply any security patches released by the vendor.

Q: What versions of ILIAS are affected by CVE-2024-33529?

CVE-2024-33529 affects ILIAS versions before 7.30, before 8.11, and version 9.0.

Q: Who can exploit CVE-2024-33529?

CVE-2024-33529 can be exploited by remote authenticated attackers who have administrative privileges.

Q: What types of attacks are possible with CVE-2024-33529?

CVE-2024-33529 allows attackers to execute operating system commands through file uploads of dangerous types.

Published May 21, 2024

Updated

ILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS 9.0 allow remote authenticated attackers with administrative privileges to execute operating system commands via file uploads with dangerous types.

Affected Software

6 affected components

ILIAS ILIAS 7<7.30

ILIAS ILIAS 8<8.11

ILIAS ILIAS 9.0

ILIAS ILIAS>=7.0<7.30

ILIAS ILIAS>=8.0<8.11

ILIAS ILIAS=9.0

Remediation

Patch Available

https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&cmd=layout&ref_id=1719&obj_id=170040

Event History

May 21, 2024

CVE Published

via MITRE·02:46 PM

Data Sourced

via MITRE·02:46 PM

Description

Frequently Asked Questions

What is the severity of CVE-2024-33529?

CVE-2024-33529 is classified as a high severity vulnerability due to its potential for remote command execution by authenticated attackers.

How do I fix CVE-2024-33529?