CVE-2022-31266 Information

Description

In ILIAS through 7.10 lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounts.

Reference

https://www.bcksec.com/services/ https://medium.com/@bcksec/in-ilias-through-7-10-620c0de685ee