CVE-2023-36487

CriticalCVSS 9.8

Published: 29/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.77%

51th percentile - higher than 51% of all known CVEs

The password reset function in ILIAS versions 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account.

Attackers can gain full access to user accounts, potentially leading to data breaches and security violations within the organization.

It is recommended to update to the latest version of ILIAS to secure the password reset function against unauthorized access.

Original NVD description (English source)

The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account.