Description (CNA)
Chamilo is a learning management system. Prior to version 1.11.28, parameter from SOAP request is evaluated without filtering which leads to Remote Code Execution. This issue has been patched in version 1.11.28.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| chamilo / chamilo-lms | affected < 1.11.28 |
CWE
CWE-95
References
- https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-356v-7xg2-3678
- https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.28
ADP enrichment
No English description supplied.
No references supplied.