CVE-2023-4222
Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability
Summary
Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability
Original description
The description as published by the source.
Command injection in main/lp/openoffice_text_document.class.php in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characters.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory starlabs.sg
- advisory support.chamilo.org
- patch github.com
- patch github.com