Description
Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via arbitrary file write.
References (3)
Core 3
Core References
Issue Tracking, Patch, Vendor Advisory vendor-advisory
https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-124-2023-07-13-Critical-impact-High-risk-Unauthenticated-Arbitrary-File-Write-RCE-CVE-2023-3533
Exploit, Third Party Advisory third-party-advisory
https://starlabs.sg/advisories/23/23-3533/
Scores
CVSS v3
9.8
EPSS
0.0461
EPSS Percentile
89.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-22
Status
published
Products (1)
chamilo/chamilo
< 1.11.20
Published
Nov 28, 2023
Tracked Since
Feb 18, 2026