Chamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows authenticated users with access to 'big file uploads' to copy/move files from anywhere in the file system into the web directory.
References
Link | Resource |
---|---|
https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-95-2022-09-14-High-impact-Moderate-risk-Authenticated-Local-file-inclusion | Issue Tracking Vendor Advisory |
Configurations
History
19 Oct 2022, 05:21
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-95-2022-09-14-High-impact-Moderate-risk-Authenticated-Local-file-inclusion - Issue Tracking, Vendor Advisory | |
CPE | cpe:2.3:a:chamilo:chamilo:1.11.16:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
CWE | CWE-434 |
17 Oct 2022, 18:52
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-10-17 18:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-42029
Mitre link : CVE-2022-42029
CVE.ORG link : CVE-2022-42029
JSON object : View
Products Affected
chamilo
- chamilo
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type