Vulnerability · Published Nov 28, 2023 · Assigned by STAR_Labs

CVE-2023-4222Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability

High 7.2

In plain English

A high-severity OS command injection in Chamilo from Chamilo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.5% (higher than 89% of all known vulnerabilities).

Severity (CVSS 3.1)7.2High

Exploit odds (30 days)3.5%top 10.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Command injection in `main/lp/openoffice_text_document.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characters.

Affected products (as reported)

Vendor	Product	Versions
Chamilo	Chamilo	0 – through 1.11.24

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

https://support.chamilo.org/projects/chamilo-18/wiki/security_issues#Issue-128-2023-09-04-Critical-impact-Moderate-risk-Authenticated-users-may-gain-unauthenticated-RCE-CVE-2023-4221CVE-2023-4222 vendor-advisory
https://starlabs.sg/advisories/23/23-4222 third-party-advisory
https://github.com/chamilo/chamilo-lms/commit/ed72914608d2a07ee2eb587c1a654480d08201db patch
https://github.com/chamilo/chamilo-lms/commit/841a07396fed0ef27c5db13a1b700eac02754fc7 patch