Description
admin/user_import.php in Chamilo 1.11.x reads XML data without disabling the ability to load external entities.
Remediation
References
Related Vulnerabilities
WordPress Plugin Email Log Information Disclosure (1.9)
Pega Infinity Improper Restriction of XML External Entity Reference Vulnerability (CVE-2023-50168)
Apache HTTP Server Uncontrolled Resource Consumption Vulnerability (CVE-2009-1890)
WordPress Plugin Fudousan Cross-Site Scripting (5.7.0)
Django Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-15337)