CVE-2023-34944

CRITICAL 9.8CVE-2023-34944 · Published 13/06/2023 · updated 09/07/2026

In short

CVE-2023-34944 is a CRITICAL (CVSS 9.8) vulnerability affecting chamilo lms (chamilo).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
chamilo lms chamilo	`≥ 1.11.0, ≤ 1.11.18`	No fix yet

Description

An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up to v1.11.18 allows attackers to execute arbitrary code via uploading a crafted SVG file.

References

chamilo/chamilo-lms commit 0d0c88c · Patch
chamilo/chamilo-lms commit f6e8355 · Patch
support.chamilo.org/projects/chamilo-18/wiki/Security_issues · Vendor Advisory

More vulnerabilities in chamilo lms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

chamilo lms

chamilo

≥ 1.11.0, ≤ 1.11.18

No fix yet

More vulnerabilities in chamilo lms

See all →