CVE-2023-34960

Severity

critical

Source

NVD · cve

Published

2023-08-01

CVSS

9.8

Reference

https://nvd.nist.gov/vuln/detail/CVE-2023-34960

⚡ RCE shame 50/100 rce

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name.

Players implicated

chamilo · vendor chamilo · product

Description

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.