CVE-2023-45867

CVE-2023-45867 is a medium-criticality Directory Traversal vulnerability affecting ILIAS (2013-09-12 release) in its ScormAicc module. An authenticated attacker, typically a tutor, can exploit this to gain unauthorized access to sensitive files on the web server, including those outside the document root, by manipulating the 'file' parameter in a URL. This remote exploit poses a significant risk to confidentiality, with a CVSS score of 6.5. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.