CVE-2021-35413: High severity chamilo lms vulnerability
A remote code execution (RCE) vulnerability in courseintropdfimport.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-35413?
CVE-2021-35413 is a remote code execution vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x that allows authenticated attackers to execute arbitrary code via a crafted .htaccess file.
How can an attacker exploit CVE-2021-35413?
To exploit CVE-2021-35413, an attacker needs to be authenticated and can execute arbitrary code by using a crafted .htaccess file.
What is the severity of CVE-2021-35413?
CVE-2021-35413 has a high severity rating of 8.8 (out of 10).
Which version of Chamilo LMS is affected by CVE-2021-35413?
CVE-2021-35413 affects Chamilo LMS v1.11.x versions from 1.11.0 to 1.11.16.
Is there a fix or patch available for CVE-2021-35413?
Yes, a fix for CVE-2021-35413 is available. It is recommended to update Chamilo LMS to a version where the vulnerability has been patched.