by Kastro
Paper/Archive/CVE-2023-3533

CVE-2023-3533

Chamilo Chamilo — Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File Write

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 89.2.892 × 2017.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via arbitrary file write.

Affected

ProductAffectedFixed inSource
Chamilo≤ 1.11.20–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
STAR_Labs (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

advisorysupport.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-124-2023-07-13-Critical-impact-High-risk-Unauthenticated-Arbitrary-File-Write-RCE-CVE-2023-3533writeupstarlabs.sg/advisories/23/23-3533patchgithub.com/chamilo/chamilo-lms/commit/37be9ce7243a30259047dd4517c48ff8b21d657a