CVE-2023-4222
Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability
概要
Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Command injection in main/lp/openoffice_text_document.class.php in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characters.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory starlabs.sg
- advisory support.chamilo.org
- patch github.com
- patch github.com