Security Advisory
CVE-2023-4226
8.8
HIGH
Vulnerability Description
Unrestricted file upload in `/main/inc/ajax/work.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.
Published Date
November 28, 2023
Official Source
NIST NVD Advisory