CVE-2021-35413

moderate-risk
Published 2021-12-03

A remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file.

Do I need to act?

~
3.2% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Chamilo

References (8)

Exploit https://github.com/andrejspuler/writeups/tree/main/chamilo-lms#authenticated-rem...
Patch https://github.com/chamilo/chamilo-lms/commit/2e5c004b57d551678a1815500ef91524ba...
Patch https://github.com/chamilo/chamilo-lms/commit/905a21037ebc9bc5369f0fb380177cb56f...
Patch https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-66-2021-05-21-...
Exploit https://github.com/andrejspuler/writeups/tree/main/chamilo-lms#authenticated-rem...
Patch https://github.com/chamilo/chamilo-lms/commit/2e5c004b57d551678a1815500ef91524ba...
Patch https://github.com/chamilo/chamilo-lms/commit/905a21037ebc9bc5369f0fb380177cb56f...
Patch https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-66-2021-05-21-...
41
/ 100
moderate-risk
Severity 30/34 · Critical
Exploitability 6/34 · Minimal
Exposure 5/34 · Minimal