Ilios Project Updates: Making curriculum in the health professions more meaningful in a complex and changing world.
    curriculum management for the health professions

A bug was recently reported in Ilios which would allow an authenticated user to bypass some of the security controls and read data which they otherwise should not have been able to access. This was introduced in v3.75.1.

While this would not have allowed access from a member of the public or any unauthenticated user, it could have allowed a student to access data about other students including their email address and schedule. This occurred as a result of the accidental sharing of a URL.
While much of the data in Ilios is directory data and available from other sources students schedules, including participation in remedial or individual educational programs may be more sensitive. As such we are encouraging all campuses to upgrade to the latest version of Ilios (v3.101.0) as soon as possible.

For hosted Ilios schools, there is no action necessary. Your installations will be updated for you automatically.

The latest code and the complete changelog for this release, as always, are available for download here:

Get automatic upgrades, always stay on the most current releases, and enjoy the security of knowing that your servers are being managed by the core Ilios team! We can help migrate your existing Ilios, or if you are new to Ilios we can spin you up an original setup. Interested in having us host your Ilios instance in our secure production environment? Let us know! 
Check out and if interested, please contact us for additional details, pricing and more info.

LTI DEPLOYMENT: You can now plug the Ilios events & calendar dashboard, as well as the course manager, directly into your LTI-compatible LMS pages. It's as easy as clicking your mouse (two or three times). In order to deploy, you will need to be provided with a secure access key. Please email us for complete instructions at

TRAINING: Are you interested in getting a focused training for your power Ilios users and managers in your school or institution? We can do that for you: 1.5 - 2 days of focused training on the most effective ways to leverage Ilios as power users, and deliver information to your students and faculty in the best way possible, custom-tailored for your needs and methodologies. Please contact us if you are interested.

How to Update Your Frontend:
The Ilios frontend is always up-to-date on our content-delivery servers at Amazon S3, but you will need to regularly run a console command on your backend instance in order ensure that your users are seeing the latest version and that they are getting all the latest features and bugfixes. To make sure you users are receiving the latest frontend code at all times, just follow the steps described here:

Though you will probably never need to deploy the Ilios 3 Frontend on your own servers, the source for the frontend code can always be found at

The changelog for updates specific to the frontend can be viewed here.

Our online user guides are available at

the Ilios Team

Copyright © 2022 UC Regents, All rights reserved.

Email Marketing Powered by Mailchimp