CVE-2023-3533
Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File Write
概要
Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File Write
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Path traversal in file upload functionality in /main/webservices/additional_webservices.php in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via arbitrary file write.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory starlabs.sg
- advisory support.chamilo.org
- patch github.com
- web github.com