CVE-2023-4225
Chamilo LMS File Upload Functionality Remote Code Execution
Résumé
Chamilo LMS File Upload Functionality Remote Code Execution
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Unrestricted file upload in /main/inc/ajax/exercise.ajax.php in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory starlabs.sg
- advisory support.chamilo.org
- patch github.com
- patch github.com
- patch github.com