CVE-2023-32778

LowCVSS 3.3/10Last modified Sep 22, 2026

Description

An issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.1. An attacker can execute arbitrary code via ZIP upload.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-23

Affected software

No affected versions have been published.

Timeline

Published
Sep 14, 2026
Last modified
Sep 22, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-327817.2A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user witCVE-2023-327827.2A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with wriCVE-2023-327837.5The event analysis component in Zoho ManageEngine ADAudit Plus 7.1.1 allows an attacker to bypass audit detection by creating or renaming usCVE-2023-327847.5In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or nCVE-2023-327867.5In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially pCVE-2023-327877.5The OPC UA Legacy Java Stack before 6f176f2 enables an attacker to block OPC UA server applications via uncontrolled resource consumption soCVE-2023-327885.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privCVE-2023-327895.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privCVE-2023-32794.9The WordPress Gallery Plugin WordPress plugin before 3.39 does not validate some block attributes before using them to generate paths passedCVE-2023-327906.1Cross-Site Scripting (XSS) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to inject a malicious JavaCVE-2023-327916.5Cross-Site Request Forgery (CSRF) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to manipulate and dCVE-2023-327926.5Cross-Site Request Forgery (CSRF) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to eliminate roles
CVE-2023-32778: Low severity, CVSS 3.3 | Vulnix