CVE-2023-3533

moderate-risk
Published 2023-11-28

Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via arbitrary file write.

Do I need to act?

~
4.6% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
+
Fix available
Upgrade to: 37be9ce7243a30259047dd4517c48ff8b21d657a
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Chamilo

References (6)

Patch https://github.com/chamilo/chamilo-lms/commit/37be9ce7243a30259047dd4517c48ff8b2...
Exploit https://starlabs.sg/advisories/23/23-3533/
Issue Tracking https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-124-2...
Patch https://github.com/chamilo/chamilo-lms/commit/37be9ce7243a30259047dd4517c48ff8b2...
Exploit https://starlabs.sg/advisories/23/23-3533/
Issue Tracking https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-124-2...
45
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 8/34 · Low
Exposure 5/34 · Minimal