Lucene search
+L

4 matches found

NVD
NVD
•added 2023/12/25 8:15 a.m.•22 views

CVE-2023-36485

The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user via a malicious BPMN2 workflow definition file...

7.2CVSS0.00791EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/12/25 12:00 a.m.•32 views

CVE-2023-36486

The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user by uploading a workflow definition file with a malicious filename...

7.1AI score0.00855EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/25 12:00 a.m.•2 views

CVE-2023-36485: Undefined Security Weakness

The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user via a malicious BPMN2 workflow definition file...

7.2CVSS7.5AI score0.00791EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/12/25 12:00 a.m.•44 views

CVE-2023-36485

The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user via a malicious BPMN2 workflow definition file...

7AI score0.00791EPSS
SaveExploits0References3
Rows per page
Query Builder