| Package | Affected versions | Patched versions |
|---|---|---|
| ilias | ≥ 8.0, < 8.3< 7.23 | 8.37.23 |
The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user via a malicious BPMN2 workflow definition file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free