The workflow-engine of ILIAS before... CVE-2023-36486
-
AV
AC
AU
C
I
A
发布：
2023-12-25
修订：
2024-02-14
The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user by uploading a workflow definition file with a malicious filename.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有2条受影响产品信息
