medium4.3
CVE-2022-31266
In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounts.
Impact
In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ilias | Ilias | through 7.10 |