CVE-2024-47886: Chamilo: Post-Auth Remote Code Execution
Chamilo is a learning management system. Chamillo is affected by a post-authentication phar unserialize which leads to a remote code execution (RCE) within versions 1.11.12 to 1.11.26. By abusing multiple supported features from the virtualization plugin vchamilo, the vulnerability allows an administrator to execute arbitrary code on the server. This issue has been patched in version 1.11.26.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47886?
CVE-2024-47886 has been classified as a critical vulnerability due to its potential for post-authentication remote code execution.
How do I fix CVE-2024-47886?
To remediate CVE-2024-47886, upgrade Chamilo to version 1.11.28 or later.
What versions are affected by CVE-2024-47886?
CVE-2024-47886 affects Chamilo versions from 1.11.12 to 1.11.26.
What type of vulnerability is CVE-2024-47886?
CVE-2024-47886 is a post-authentication remote code execution vulnerability.
How does CVE-2024-47886 impact Chamilo users?
CVE-2024-47886 allows authenticated users to execute arbitrary code on the server, posing a significant security risk.