Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user via a malicious BPMN2 workflow definition file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ILIAS安全漏洞
Vulnerability Description
ILIAS是一套开源的学习管理系统。 ILIAS 7.23 之前、8.3 之前版本存在安全漏洞，该漏洞源于workflow-engine允许攻击者通过恶意 BPMN2 文件以应用程序用户的身份在应用程序服务器上运行任意系统命令。
CVSS Information
N/A
Vulnerability Type
N/A