CVE-2020-23996: Ilias

High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days.

A local file inclusion vulnerability in ILIAS before 5.3.19, 5.4.10 and 6.0 allows remote authenticated attackers to execute arbitrary code via the import of personal data.

Affected products

• Ilias Ilias: before 5.3.19 (fixed in 5.3.19); from 5.4.0, before 5.4.10 (fixed in 5.4.10)

Published 2021-05-13. Last modified 2026-06-17.