Chamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows authenticated users with access to 'big file uploads' to copy/move files from anywhere in the file system into the web directory.
References
Link | Resource |
---|---|
https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-95-2022-09-14-High-impact-Moderate-risk-Authenticated-Local-file-inclusion | Issue Tracking Vendor Advisory |
Configurations
Information
Published : 2022-10-17 11:15
Updated : 2022-10-18 22:21
NVD link : CVE-2022-42029
Mitre link : CVE-2022-42029
JSON object : View
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type
Products Affected
chamilo
- chamilo