CVE-2023-36486

Published December 25th, 2023

View on NVD ↗

CVSS v3

7.2

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user by uploading a workflow definition file with a malicious filename.

ILIAS-eLearning/ILIAS

GitHub repository for official ILIAS release branches and development branches (trunk)

GitHub

485