CVE-2023-4221
Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability
Résumé
Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Command injection in main/lp/openoffice_presentation.class.php in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characters.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory starlabs.sg
- advisory support.chamilo.org
- patch github.com
- patch github.com