CVE-2023-3545
Chamilo LMS Htaccess File Upload Security Bypass
概要
Chamilo LMS Htaccess File Upload Security Bypass
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Improper sanitisation in main/inc/lib/fileUpload.lib.php in Chamilo LMS <= v1.11.20 on Windows and Apache installations allows unauthenticated attackers to bypass file upload security protections and obtain remote code execution via uploading of .htaccess file. This vulnerability may be exploited by privileged attackers or chained with unauthenticated arbitrary file write vulnerabilities, such as CVE-2023-3533, to achieve remote code execution.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory starlabs.sg
- advisory support.chamilo.org
- patch github.com
- web github.com