CVE-2023-34944
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-34944
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-34944.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2023-34944
- Published
- 2023-06-13T21:15:10Z
- Modified
- 2025-01-08T15:04:30.078186Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up to v1.11.18 allows attackers to execute arbitrary code via uploading a crafted SVG file.
- References
-
- https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-113-2023-05-31-Low-impact-Low-risk-XSS-through-SVG
- https://github.com/chamilo/chamilo-lms/commit/0d0c88c4806280ac9b70a299d6e3099269c9bc54
- https://github.com/chamilo/chamilo-lms/commit/f6e83550c2d17fc93a65ec4be602a78312289f37
- http://chamilo.com
Affected packages
Git / github.com/chamilo/chamilo-lms
Affected ranges
- Type
- GIT
- Repo
- https://github.com/chamilo/chamilo-lms
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixedFixedFixed
Affected versions
1.*
1.10.x.pre-doctrine
Other
CHAMILO_1_10_DEV_ICPNA_20130114
CHAMILO_1_8_6_2_BETA_1
CHAMILO_1_8_6_2_STABLE
CHAMILO_1_8_6_2_STABLE_BIS
CHAMILO_1_8_6_2_STABLE_CUATER
CHAMILO_1_8_6_2_STABLE_TRIS
CHAMILO_1_8_7_1_STABLE_1
CHAMILO_1_8_7_1_STABLE_2
CHAMILO_1_8_7_ALPHA_1
CHAMILO_1_8_7_ALPHA_2
CHAMILO_1_8_7_BETA_1
CHAMILO_1_8_7_RC2
CHAMILO_1_8_7_RC_1
CHAMILO_1_8_7_STABLE
CHAMILO_1_8_7_STABLE_BIS
CHAMILO_1_8_8_2_RC_1
CHAMILO_1_8_8_2_STABLE
CHAMILO_1_8_8_2_STABLE_2
CHAMILO_1_8_8_2_STABLE_3
CHAMILO_1_8_8_4_BETA_1
CHAMILO_1_8_8_4_STABLE
CHAMILO_1_8_8_ALPHA
CHAMILO_1_8_8_BETA_1
CHAMILO_1_8_8_BETA_2
CHAMILO_1_8_8_BETA_3
CHAMILO_1_8_8_STABLE_1
CHAMILO_1_9_0_ALPHA_1
CHAMILO_1_9_0_ALPHA_2
CHAMILO_1_9_0_ALPHA_3
CHAMILO_1_9_0_ALPHA_4
CHAMILO_1_9_0_ALPHA_5
CHAMILO_1_9_0_ALPHA_6
CHAMILO_1_9_0_ALPHA_7
CHAMILO_1_9_0_PRE_ALPHA
CHAMILO_1_9_0_RC_1
CHAMILO_1_9_0_STABLE
CHAMILO_1_9_0_STABLE_2
CHAMILO_1_9_0_STABLE_3
CHAMILO_1_9_2_STABLE
CHAMILO_1_9_2_STABLE_BIS
CHAMILO_1_9_2_STABLE_QUARTER
CHAMILO_1_9_2_STABLE_TRIS
CHAMILO_1_9_4_ALPHA_1
CHAMILO_1_9_4_RC_1
CHAMILO_1_9_4_STABLE
CHAMILO_1_9_6_RC_1
CHAMILO_1_9_6_RC_2
CHAMILO_1_9_6_STABLE
CHAMILO_1_8_8.*
CHAMILO_1_8_8.3_STABLE_4
v1.*
v1.10.6-softaculous
v1.10.6-stable
v1.11.10
v1.11.12
v1.11.12-beta.1
v1.11.14
v1.11.14-beta.1
v1.11.18
v1.11.6
v1.11.6-alpha.1
v1.11.8
v1.8.6.1
v1.9.10
v1.9.10.2
v1.9.8
v1.9.8.1
v1.9.8.2