CVE-2023-3533 - Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File Write

Back Back to CVE browser

CRITICAL

Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File Write

Published Nov 28, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 3.50%

Description

Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via arbitrary file write.

Affected products

Vendor Chamilo Product Chamilo Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=1.11.20

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Chamilo

unaffected

Version	Status	Constraints
0	affected	<=1.11.20

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44189
Advisory
https://github.com/chamilo/chamilo-lms/commit/37be9ce7243a30259047dd4517c48ff8b21d657a
patch
https://starlabs.sg/advisories/23/23-3533/
third-party-advisoryExploitThird Party Advisory
https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-124-2023-07-13-Critical-impact-High-risk-Unauthenticated-Arbitrary-File-Write-RCE-CVE-2023-3533
vendor-advisoryIssue TrackingPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44189		Advisory
https://github.com/chamilo/chamilo-lms/commit/37be9ce7243a30259047dd4517c48ff8b21d657a		patch
https://starlabs.sg/advisories/23/23-3533/		third-party-advisoryExploitThird Party Advisory
https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-124-2023-07-13-Critical-impact-High-risk-Unauthenticated-Arbitrary-File-Write-RCE-CVE-2023-3533		vendor-advisoryIssue TrackingPatchVendor Advisory