CVE-2023-4220
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
Résumé
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory starlabs.sg
- advisory support.chamilo.org
- patch github.com