CVE-2023-3545: Chamilo LMS Htaccess File Upload Security Bypass
Improper sanitisation in main/inc/lib/fileUpload.lib.php in Chamilo LMS <= v1.11.20 on Windows and Apache installations allows unauthenticated attackers to bypass file upload security protections and obtain remote code execution via uploading of .htaccess file. This vulnerability may be exploited by privileged attackers or chained with unauthenticated arbitrary file write vulnerabilities, such as CVE-2023-3533, to achieve remote code execution.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-3545?
CVE-2023-3545 refers to a vulnerability in Chamilo LMS that allows unauthenticated attackers to bypass file upload security protections and obtain remote code execution via uploading of .htaccess file.
How does CVE-2023-3545 affect Chamilo LMS?
CVE-2023-3545 affects Chamilo LMS version 1.11.20 on Windows and Apache installations.
What is the severity of CVE-2023-3545?
CVE-2023-3545 has a severity rating of critical with a CVSS score of 9.8.
How can an attacker exploit CVE-2023-3545?
An attacker can exploit CVE-2023-3545 by uploading a .htaccess file to bypass file upload security protections and execute remote code.
Is there a fix available for CVE-2023-3545?
Yes, a fix for CVE-2023-3545 is available. It is recommended to update to a version of Chamilo LMS that is not affected by this vulnerability.