CVE-2022-31266

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-31266

Import Source

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-31266

Published

2022-06-29T01:15:07.597Z

Modified

2026-04-10T04:47:51.450716Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator

Summary

[none]

Details

In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounts.

References

Affected packages

Type

GIT

Repo

https://github.com/ilias-elearning/ilias

Events

Introduced

Last affected

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.10"
        }
    ]
}

v5.*

v5.1.0beta2

v5.3.0beta1

v7.*

v7.0

v7.0_beta1

v7.0_beta2

v7.1

v7.10

v7.2

v7.3

v7.4

v7.6

v7.9

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-31266.json"