CVE-2023-3368

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Nov 28, 2023

Updated: Dec 4, 2023

CWE ID 78

Summary

CVE-2023-3368 is a command injection vulnerability affecting Chamilo Learning Management System (LMS) versions prior to 1.11.20. The vulnerability is located in `/main/webservices/additional_webservices.php`. An attacker can exploit this flaw to execute arbitrary commands remotely without authentication, bypassing the neutralization controls in place, including the one addressed by CVE-2023-34960.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Chamilo

Affected Vendors

Chamilo

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/tl8xBb
https://www.cve.org/CVERecord?id=CVE-2023-3368
https://nvd.nist.gov/vuln/detail/CVE-2023-3368

Back to Vulnerability Database