CVE-2024-50337 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Chamilo is a learning management system. Prior to version 1.11.28, the OpenId function allows anyone to send requests to any URL on server's behalf, which resul…
Medium CVSS: 5.3

CVE-2024-50337

Chamilo is a learning management system. Prior to version 1.11.28, the OpenId function allows anyone to send requests to any URL on server's behalf, which results in unauthenticated blind SSRF. This issue has been patched in version 1.11.28.
Vendor
Chamilo
Product
Chamilo Lms
CWE
CWE-918
Yayın Tarihi
2026-03-02 15:16:29
Güncelleme
2026-03-03 19:11:40
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-918 Chamilo Lms MEDIUM Chamilo 2026

Referanslar

https://github.com/chamilo/chamilo-lms/commit/43a9bd1fb8b3f57e7935a6a6bc48975e2063b01b https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.28 https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-rp2w-g734-jf8h