Description
A Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the internal network and execute arbitrary system commands via a crafted Phar file.
Remediation
References
Related Vulnerabilities
Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2023-28334)
WordPress Plugin Ultimate Profile Builder By CMSHelpLive Multiple Vulnerabilities (2.3.3)
ownCloud Session Fixation Vulnerability (CVE-2021-35948)
Oracle JRE CVE-2020-14556 Vulnerability (CVE-2020-14556)
WordPress Plugin LearnDash LMS Arbitrary File Upload (2.5.3)