CVE-2023-34959

Name of the Vulnerable Software and Affected Versions Chamilo versions 1.11.* up to 1.11.18

Description The issue allows attackers to execute a Server-Side Request Forgery (SSRF) and obtain information on the services running on the server via crafted requests in the social and links tools.

Recommendations For Chamilo versions 1.11.* up to 1.11.18, consider restricting access to the social and links tools until a patch is available. As a temporary workaround, avoid using the crafted requests in these tools to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.