CVE-2023-34959: SSRF
First published: Thu Jun 08 2023(Updated: )
An issue in Chamilo v1.11.* up to v1.11.18 allows attackers to execute a Server-Side Request Forgery (SSRF) and obtain information on the services running on the server via crafted requests in the social and links tools.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Chamilo Chamilo Lms | >=1.11.0<=1.11.18 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/chamilo/chamilo-lms/commit/cc278f01864948b1fb160e03f0a3dc0875d5f81f
- https://github.com/chamilo/chamilo-lms/commit/ea5791ff8ce6ea45148a171b0da5348a7c415e6f
- https://github.com/chamilo/chamilo-lms/commit/ed946908fef23e8aa4cefc28f745f3cd6710099f
- https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-111-2023-04-20-Moderate-impact-Low-risk-Multiple-blind-SSRF-in-links-and-social-tools
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-34959.
What is the severity level of CVE-2023-34959?
The severity level of CVE-2023-34959 is medium, with a CVSS score of 5.3.
What is the affected software?
The affected software is Chamilo LMS version 1.11.* up to 1.11.18.
What is the impact of CVE-2023-34959?
CVE-2023-34959 allows attackers to execute a Server-Side Request Forgery (SSRF) and obtain information on the services running on the server via crafted requests in the social and links tools.
How can I fix CVE-2023-34959?
To fix CVE-2023-34959, update Chamilo LMS to version 1.11.19 or later.
- collector/nvd-index
- agent/type
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/tags
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/chamilo
- canonical/chamilo chamilo lms
- version/chamilo chamilo lms/1.11.0
- version/chamilo chamilo lms/1.11.18