Vulnerability · Published Nov 28, 2023 · Assigned by STAR_Labs
CVE-2023-3368Chamilo LMS Unauthenticated Command Injection
Critical 9.8
In plain English
A critical-severity OS command injection in Chamilo from Chamilo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 69.7% (higher than 99.4% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)69.7%top 0.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Nuclei
Official description
Command injection in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. This is a bypass of CVE-2023-34960.
Affected products (as reported)
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-121-2023-07-05-Critical-impact-High-risk-Unauthenticated-Command-Injection-CVE-2023-3368 vendor-advisory
- https://starlabs.sg/advisories/23/23-3368/ third-party-advisory
- https://github.com/chamilo/chamilo-lms/commit/37be9ce7243a30259047dd4517c48ff8b21d657a patch
- https://https://github.com/chamilo/chamilo-lms/commit/4c69b294f927db62092e01b70ac9bd6e32d5b48b patch