CVE-2024-50337
Chamilo: Potential unauthenticated blind SSRF via openid function
Résumé
Chamilo: Potential unauthenticated blind SSRF via openid function
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Chamilo is a learning management system. Prior to version 1.11.28, the OpenId function allows anyone to send requests to any URL on server's behalf, which results in unauthenticated blind SSRF. This issue has been patched in version 1.11.28.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com