CVE-2023-3368
Chamilo LMS Unauthenticated Command Injection
概要
Chamilo LMS Unauthenticated Command Injection
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Command injection in /main/webservices/additional_webservices.php in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. This is a bypass of CVE-2023-34960.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory starlabs.sg
- advisory support.chamilo.org
- patch github.com
- patch https
- web github.com