{"id":"CVE-2018-11119","details":"ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 redirects a logged-in user to a third-party site via the return_to_url parameter.","modified":"2026-07-08T05:52:09.764544599Z","published":"2018-05-17T13:29:00.413Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:ilias:ilias:5.2.0:beta2:*:*:*:*:*:*","cpe:2.3:a:ilias:ilias:5.2.0:beta3:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.2.0-beta2"},{"last_affected":"5.2.0-beta2"},{"introduced":"5.2.0-beta3"},{"last_affected":"5.2.0-beta3"}],"source":"CPE_STRING","vendor_product":"ilias:ilias"}]},"references":[{"type":"ADVISORY","url":"https://www.ilias.de/docu/goto.php?target=st_229"},{"type":"FIX","url":"https://github.com/ILIAS-eLearning/ILIAS/commit/01a24cf04fe8dddf1da59ca497580637973482b6"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ilias-elearning/ilias","events":[{"introduced":"1a4b8f71a3b4f5f753d847fa87258a214baeef06"},{"last_affected":"ba288e35eed9075df6088e216cfe370675b6b2a9"},{"introduced":"b5e252d75801c5c0d47c40e773e502eb78f136bf"},{"last_affected":"c98fb5a727163f9416127a5e26c89c8eaa54dc0b"},{"introduced":"a3f852a420235507d7cbe57d0e6c485667ab31cb"},{"last_affected":"aad29de0e53aaa23980fa34f4c4f37a1182e04a2"},{"introduced":"1b17dca537848333034e07adcbb506fc611ddef6"},{"last_affected":"fcda3f98c5edadbd79216c44656df5f3002991bf"},{"fixed":"01a24cf04fe8dddf1da59ca497580637973482b6"}],"database_specific":{"source":["CPE_RANGE","CPE_STRING","REFERENCES"],"cpe":["cpe:2.3:a:ilias:ilias:*:*:*:*:*:*:*:*","cpe:2.3:a:ilias:ilias:5.1.0:beta1:*:*:*:*:*:*","cpe:2.3:a:ilias:ilias:5.2.0:beta1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.1.0"},{"last_affected":"5.1.26"},{"introduced":"5.2.0"},{"last_affected":"5.2.15"},{"introduced":"5.3.0"},{"last_affected":"5.3.4"},{"introduced":"5.1.0-beta1"},{"last_affected":"5.1.0-beta1"},{"introduced":"5.2.0-beta1"},{"last_affected":"5.2.0-beta1"}]}}],"versions":["5.1.0-beta1","5.2.0-beta1","v5.1.26","v5.2.15","v5.1.25","v5.2.14","v5.2.13","v5.1.23","v5.1.22","v5.1.21","v5.2.7","v5.2.5","v5.1.0","v5.1.18","v5.1.17","v5.2.0","v5.1.14","v5.1.13","v5.1.10","v5.1.9","v5.1.8","v5.1.6","v5.1.5","v5.1.2","v5.1.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-11119.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}