CVE-2023-3533
Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File Write
Résumé
Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File Write
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Path traversal in file upload functionality in /main/webservices/additional_webservices.php in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via arbitrary file write.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory starlabs.sg
- advisory support.chamilo.org
- patch github.com
- web github.com