Security Advisory
CVE-2022-42029
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Chamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows authenticated users with access to big file uploads to copy/move files from anywhere in the file system into the web directory.