5.1
Medium
CVE-2025-11345 A flaw has been found in ILIAS up to 8.23/9.13/10.1
Description
A flaw has been found in ILIAS up to 8.23/9.13/10.1. Affected by this issue is the function unserialize of the component Test Import. This manipulation causes deserialization. It is possible to initiate the attack remotely. Upgrading to version 8.24, 9.14 and 10.2 can resolve this issue. Upgrading the affected component is advised.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ILIAS 10.2 | earliest → < 10.2 | 10.2 |
| ILIAS | 10.1 | No fix stated |
| ILIAS | 10.0 | No fix stated |
| ILIAS 9.14 | earliest → < 9.14 | 9.14 |
| ILIAS | 9.13 | No fix stated |
| ILIAS | 9.12 | No fix stated |
| ILIAS | 9.11 | No fix stated |
| ILIAS | 9.10 | No fix stated |
| ILIAS | 9.9 | No fix stated |
Show the 34 other branches Hide the 34 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| ILIAS | 9.8 | No fix stated |
| ILIAS | 9.7 | No fix stated |
| ILIAS | 9.6 | No fix stated |
| ILIAS | 9.5 | No fix stated |
| ILIAS | 9.4 | No fix stated |
| ILIAS | 9.3 | No fix stated |
| ILIAS | 9.2 | No fix stated |
| ILIAS | 9.1 | No fix stated |
| ILIAS | 9.0 | No fix stated |
| ILIAS 8.24 | earliest → < 8.24 | 8.24 |
| ILIAS | 8.23 | No fix stated |
| ILIAS | 8.22 | No fix stated |
| ILIAS | 8.21 | No fix stated |
| ILIAS | 8.20 | No fix stated |
| ILIAS | 8.19 | No fix stated |
| ILIAS | 8.18 | No fix stated |
| ILIAS | 8.17 | No fix stated |
| ILIAS | 8.16 | No fix stated |
| ILIAS | 8.15 | No fix stated |
| ILIAS | 8.14 | No fix stated |
| ILIAS | 8.13 | No fix stated |
| ILIAS | 8.12 | No fix stated |
| ILIAS | 8.11 | No fix stated |
| ILIAS | 8.10 | No fix stated |
| ILIAS | 8.9 | No fix stated |
| ILIAS | 8.8 | No fix stated |
| ILIAS | 8.7 | No fix stated |
| ILIAS | 8.6 | No fix stated |
| ILIAS | 8.5 | No fix stated |
| ILIAS | 8.4 | No fix stated |
| ILIAS | 8.3 | No fix stated |
| ILIAS | 8.2 | No fix stated |
| ILIAS | 8.1 | No fix stated |
| ILIAS | 8.0 | No fix stated |