CVE-2020-23995

6.5 mediumEPSS 1.5%

Medium (6.5) in ilias ilias. EPSS 1.5% chance of exploitation in the next 30 days.

An information disclosure vulnerability in ILIAS before 5.3.19, 5.4.12 and 6.0 allows remote authenticated attackers to get the upload data path via a workspace upload.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-209
Published: 2021-05-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ilias:ilias

References

https://cwe.mitre.org/data/definitions/209.html
https://docu.ilias.de/goto_docu_pg_118817_35.html
https://docu.ilias.de/goto_docu_pg_122177_35.html
https://docu.ilias.de/goto_docu_pg_124761_35.html
https://github.com/ILIAS-eLearning/ILIAS/commit/94d9b16010ec3abeae8d2cbb05622ccd999119ad

Check your stack JSON