CVE-2023-34944

Name of the Vulnerable Software and Affected Versions Chamilo versions 1.11.* up to 1.11.18

Description The issue allows attackers to execute arbitrary code via uploading a crafted SVG file, exploiting an arbitrary file upload vulnerability in the /fileUpload.lib.php component.

Recommendations For Chamilo versions 1.11.* up to 1.11.18, consider restricting access to the /fileUpload.lib.php component until a patch is available. As a temporary workaround, avoid using the file upload functionality in the affected component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.