CVE-2025-59544 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Chamilo is a learning management system. Prior to version 1.11.34, the functionality for the user to update the category does not implement authorization checks…
Medium CVSS: 6.9

CVE-2025-59544

Chamilo is a learning management system. Prior to version 1.11.34, the functionality for the user to update the category does not implement authorization checks for the "category_id" parameter which allows users to update the category of any user by replacing the "category_id" parameter. This issue has been patched in version 1.11.34.
Vendor
Chamilo
Product
Chamilo Lms
CWE
CWE-862
Yayın Tarihi
2026-03-06 04:16:02
Güncelleme
2026-03-09 17:32:34
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-862 Chamilo Lms MEDIUM Chamilo 2026

Referanslar

https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.34 https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-x3h9-h7qf-wwrf