CVSS 3.1 Score 6.5 of 10 (medium)


Published Oct 26, 2023
Updated: Nov 14, 2023


CVE-2023-45867 is a medium-criticality vulnerability affecting ILIAS (2013-09-12 release) and the ScormAicc module. This vulnerability allows an attacker with a privileged account, typically holding the tutor role, to exploit a directory traversal local file inclusion vulnerability. By manipulating the file parameter in a URL, the attacker can gain unauthorized access to confidential files stored on the web server, potentially compromising the system's security. The vulnerability poses a significant risk to confidentiality and can be remotely exploited over the internet. The base severity of this vulnerability is rated as MEDIUM with a base score of 6.5, and it requires low privileges and no user interaction to exploit. Remediation measures should be taken promptly to address this vulnerability and prevent unauthorized access to sensitive files.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-45867 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options