CVE-2018-11119 - ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 redirects a logged-in user to a third-party site via the return_to_url parameter

MEDIUM

ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 redirects a logged-in user to a third-party site via the return_to_url parameter

Published May 17, 2018

6.1

MEDIUM

CVSS 3.0

EPSS 0.85%

ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 redirects a logged-in user to a third-party site via the return_to_url parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

Link	Providers	Tags
https://github.com/ILIAS-eLearning/ILIAS/commit/01a24cf04fe8dddf1da59ca497580637973482b6		x_refsource_MISCPatchThird Party Advisory
https://www.ilias.de/docu/goto.php?target=st_229		x_refsource_MISCRelease NotesVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published May 17, 2018

Updated Aug 5, 2024

Reserved May 15, 2018

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a