CVE-2022-31266

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounts.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-306

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jun 29, 2022
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-312679.8Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as anCVE-2022-312687.5A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-ICVE-2022-312698.2Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's dooCVE-2022-31275.4Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8.CVE-2022-312739.8An issue in TopIDP3000 Topsec Operating System tos_3.3.005.665b.15_smpidp allows attackers to perform a brute-force attack via a crafted sesCVE-2022-312778.8Xiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks. This allows attackers to to bypass the expected access restrictCVE-2022-31284.8The Donation Thermometer WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high privilege uCVE-2022-312825.5Bento4 MP4Dump v1.2 was discovered to contain a segmentation violation via an unknown address at /Source/C++/Core/Ap4DataBuffer.cpp:175.CVE-2022-312855.5An issue was discovered in Bento4 1.2. The allocator is out of memory in /Source/C++/Core/Ap4Array.h.CVE-2022-312875.5An issue was discovered in Bento4 v1.2. There is an allocation size request error in /Ap4RtpAtom.cpp.CVE-2022-31299.8A vulnerability was found in codeprojects Online Driving School. It has been rated as critical. Affected by this issue is some unknown functCVE-2022-312905.4A cross-site scripting (XSS) vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTM
CVE-2022-31266: Medium severity, CVSS 4.3 | Vulnix