Beveiligingsadvies

CVE-2023-3533

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-11-28 07:06:43

Laatst bijgewerkt 2024-08-02 06:55:03

Toegewezen door STAR_Labs

CVSS-score 9.8

Status PUBLISHED

Beschrijving

Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via arbitrary file write.

← Alle CVE's bekijken Bekijk op cve.org ↗