CVE-2023-36486

The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user by uploading a workflow definition file with a malicious filename...

CVE-2023-36486

The CVE-2023-36486 issue affects ILIAS’s workflow-engine prior to versions 7.23 and 8 prior to 8.3. It allows remote authenticated users to execute arbitrary system commands on the application server as the application user by uploading a workflow definition file with a malicious filename. The vu...