CRITICAL9.8
GHSA-g4c3-4g96-6g4m
Chamilo LMS CStudio upload flow allows unauthenticated remote code execution
Quick fix
GHSA-g4c3-4g96-6g4m — chamilo/chamilo-lms: upgrade to the fixed version with the command below.
composer require chamilo/chamilo-lms:^2.0.1Details
### Impact Ability to run arbitrary code on the server without authentication.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/chamilo/chamilo-lms
Introduced in:
0Fixed in: 2.0.1Fix
composer require chamilo/chamilo-lms:^2.0.1