The workflow-engine of ILIAS before... CVE-2023-36485
-
AV
AC
AU
C
I
A
发布：
2023-12-25
修订：
2024-02-14
The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user via a malicious BPMN2 workflow definition file.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有2条受影响产品信息
