TI-2025-10392 Aliases CVE-2025-11344 GHSA-5pxq-xqp4-7fxw

ILIAS Certificate Import code injection

LOW 25CWE-74Published 2025-10-06 · Updated 2026-02-24

Key facts

Attack vector: Network
Privileges required: None
User interaction: Passive
Attack complexity: Low
Attack requirements: None
Impact type: Code execution
Confidentiality · integrity · availability: Low · Low · Low
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-94.

Summary

A vulnerability was detected in ILIAS up to 8.23/9.13/10.1. Affected by this vulnerability is an unknown functionality of the component Certificate Import Handler. The manipulation results in Remote Code Execution. The attack may be performed from remote. Upgrading to version 8.24, 9.14 and 10.2 addresses this issue. It is recommended to upgrade the affected component.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00505 43rd percentileScored 2026-11-07

Fix Fixed ILIAS: 8.24, 9.14, 10.2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	ILIAS	8.0; 8.1; 8.2; 8.3; 8.4; 8.5; 8.6; 8.7; 8.8; 8.9; 8.10; 8.11; 8.12; 8.13; 8.14; 8.15; 8.16; 8.17; 8.18; 8.19; 8.20; 8.21; 8.22; 8.23; 9.0; 9.1; 9.2; 9.3; 9.4; 9.5; 9.6; 9.7; 9.8; 9.9; 9.10; 9.11; 9.12; 9.13; 10.0; 10.1	8.24, 9.14, 10.2	Patch available	CNA

ILIAS Vendor— Affected 8.0; 8.1; 8.2; 8.3; 8.4; 8.5; 8.6; 8.7; 8.8; 8.9; 8.10; 8.11; 8.12; 8.13; 8.14; 8.15; 8.16; 8.17; 8.18; 8.19; 8.20; 8.21; 8.22; 8.23; 9.0; 9.1; 9.2; 9.3; 9.4; 9.5; 9.6; 9.7; 9.8; 9.9; 9.10; 9.11; 9.12; 9.13; 10.0; 10.1 Fixed in 8.24, 9.14, 10.2 Patch available CNA

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:a:ilias:ilias:8.23:::::::*	8.23	Vulnerable	ILIAS
cpe:2.3:a:ilias:ilias:9.13:::::::*	9.13	Vulnerable	ILIAS
cpe:2.3:a:ilias:ilias:10.1:::::::*	10.1	Vulnerable	ILIAS

cpe:2.3:a:ilias:ilias:8.23:*:*:*:*:*:*:* Versions 8.23 Vulnerable ·ILIAS
cpe:2.3:a:ilias:ilias:9.13:*:*:*:*:*:*:* Versions 9.13 Vulnerable ·ILIAS
cpe:2.3:a:ilias:ilias:10.1:*:*:*:*:*:*:* Versions 10.1 Vulnerable ·ILIAS

Remediation

Fix · CNA ILIAS Fixed in 8.24, 9.14, 10.2

Timeline

2026-10-02 Threatist record created from CVE-2025-11344
2026-10-03 Alias added: GHSA-5pxq-xqp4-7fxw

References

Advisory 1

https://docu.ilias.de/go/blog/15821/882

TI-2023-24624 ILIAS 7.25 (2023-09-12) allows any authenticated user to execute arbitrary operating… CVSS 3.1CRITICAL 9.0
TI-2022-22699 ILIAS before 7.16 allows OS Command Injection. CVSS 3.1HIGH 8.8
TI-2024-22118 ILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS 9.0 allow remote… CVSS 3.1HIGH 7.2
TI-2024-22115 A Stored Cross-site Scripting (XSS) vulnerability in the "Import of user role and title… CVSS 3.1HIGH 7.1
TI-2023-24622 ILIAS (2013-09-12 release) contains a medium-criticality Directory Traversal local file… CVSS 3.1MEDIUM 6.5
TI-2022-22701 ILIAS before 7.16 has an Open Redirect. CVSS 3.1MEDIUM 6.1

See all 41 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences