Description

Cross Site Request Forgery (CSRF) vulnerability in Chamilo v.1.11 thru v.1.11.20 allows a remote authenticated privileged attacker to execute arbitrary code.

Remediation

References

CVE-2023-39061

Related Vulnerabilities

Next.js Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-27978)

XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29509)

Dojo Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2021-23450)

WordPress Plugin Video Player for YouTube Cross-Site Scripting (1.3)

Apache Tomcat Improper Input Validation Vulnerability (CVE-2013-4286)

Severity

Low

Classification

CVE-2023-39061 CWE-352 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities