7.22

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-25	CVE-2023-36485	Unspecified vulnerability in Ilias The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user via a malicious BPMN2 workflow definition file. network low complexity ilias	7.2
2023-12-25	CVE-2023-36486	Unspecified vulnerability in Ilias The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user by uploading a workflow definition file with a malicious filename. network low complexity ilias	7.2