| Package | Affected versions | Patched versions |
|---|---|---|
| chamilo lms | ≥ 1.11.0, ≤ 1.11.18 |
Incorrect access control in Chamilo 1.11.* up to 1.11.18 allows a student subscribed to a given course to download documents belonging to another student if they know the document's ID.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free