CVE-2023-34944

Severity

critical

Source

NVD · cve

Published

2023-06-13

CVSS

9.8

Reference

https://nvd.nist.gov/vuln/detail/CVE-2023-34944

⚡ RCE shame 50/100 rce

An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up to v1.11.18 allows attackers to execute arbitrary code via uploading a crafted SVG file.

Players implicated

chamilo · vendor chamilo lms · product

Description

An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up to v1.11.18 allows attackers to execute arbitrary code via uploading a crafted SVG file.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.