CVE-2023-3368

概要

参考情報

• chamilo/chamilo-lms commit 37be9ce · Patch
• https//github.com/chamilo/chamilo-lms/commit/4c69b294f927db62092e01b70ac9bd6e32d5b48b · Patch
• starlabs.sg/advisories/23/23-3368 · Exploit
• support.chamilo.org/projects/chamilo-18/wiki/security_issues · Issue Tracking

chamilo のその他の脆弱性

• CVE-2023-3545緊急 9.8Improper sanitisation in `main/inc/lib/fileUpload.lib.php` in Chamilo LMS <= v1.11.20 on Windows and Apache installations allows unauthentic…
• CVE-2023-3533緊急 9.8Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthentica…
• CVE-2023-39061低 3.5Cross Site Request Forgery (CSRF) vulnerability in Chamilo v.1.11 thru v.1.11.20 allows a remote authenticated privileged attacker to execut…
• CVE-2023-34960緊急 9.8A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary comm…
• CVE-2023-37067中 4.8Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the classes/usergroups management section.