CVE-2024-33529

Source
https://cve.org/CVERecord?id=CVE-2024-33529
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-33529.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-33529
Published
2024-05-21T15:15:29.290Z
Modified
2026-04-10T05:12:40.006003Z
Severity
  • 7.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

ILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS 9.0 allow remote authenticated attackers with administrative privileges to execute operating system commands via file uploads with dangerous types.

References

Affected packages

Git / github.com/ilias-elearning/ilias

Affected ranges

Type
GIT
Repo
https://github.com/ilias-elearning/ilias
Events
Database specific
{
    "versions": [
        {
            "introduced": "7.0"
        },
        {
            "fixed": "7.30"
        },
        {
            "introduced": "8.0"
        },
        {
            "fixed": "8.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0"
        }
    ]
}

Affected versions

v5.*
v5.1.0beta2
v5.3.0beta1
v7.*
v7.0
v7.1
v7.10
v7.13
v7.14
v7.17
v7.18
v7.19
v7.2
v7.21
v7.23
v7.24
v7.25
v7.26
v7.27
v7.28
v7.29
v7.3
v7.4
v7.6
v7.9
v8.*
v8.0_beta1
v8.0_beta2
v8.0_beta4
v8.1
v8.10
v8.2
v8.3
v8.4
v8.5
v8.6
v8.7
v8.8
v8.9
v9.*
v9.0
v9.0_beta1
v9.0_beta3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-33529.json"