ILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS 9.0 allow remote authenticated attackers with administrative privileges to execute operating system commands via file uploads with dangerous types.
{
"versions": [
{
"introduced": "7.0"
},
{
"fixed": "7.30"
},
{
"introduced": "8.0"
},
{
"fixed": "8.11"
},
{
"introduced": "0"
},
{
"last_affected": "9.0"
}
]
}