CVE-2023-37198

No fix known EPSS <1%CVSS 6.8

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE uploads or tampers with install packages.