CVE-2022-27426

2022-04-1519:21:21

mitre

www.cve.org

ssrf

chamilo lms

v1.11.13

internal network

system commands

phar file

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

A Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the internal network and execute arbitrary system commands via a crafted Phar file.

References

support.chamilo.org/projects/1/wiki/Security_issues