CVE-2023-4225
Chamilo LMS File Upload Functionality Remote Code Execution
概要
Chamilo LMS File Upload Functionality Remote Code Execution
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Unrestricted file upload in /main/inc/ajax/exercise.ajax.php in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory starlabs.sg
- advisory support.chamilo.org
- patch github.com
- patch github.com
- patch github.com