CVE-2022-42029: Malicious File Upload

Published Oct 17, 2022

Updated

Chamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows authenticated users with access to 'big file uploads' to copy/move files from anywhere in the file system into the web directory.

Affected Software

1 affected component

Chamilo Chamilo=1.11.16

Event History

Oct 17, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2022-42029?

CVE-2022-42029 is a vulnerability in Chamilo 1.11.16 that allows authenticated users to copy/move files from anywhere in the file system into the web directory.

What is the severity of CVE-2022-42029?

The severity of CVE-2022-42029 is high with a CVSS score of 8.8.

Who is affected by CVE-2022-42029?

Chamilo 1.11.16 is affected by CVE-2022-42029.

How does CVE-2022-42029 work?

CVE-2022-42029 allows authenticated users with access to 'big file uploads' to copy/move files from anywhere in the file system into the web directory.

Is there a fix for CVE-2022-42029?

The vendor has not provided a fix for CVE-2022-42029 at the moment. It is recommended to upgrade to a newer version of Chamilo when available.