← Database

CVE-2021-40662

HIGH CVSS: 8.8 Published: 2022-03-21 Modified: 2026-06-17

Description

A Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interaction with a crafted URL.

Affected Platforms

Chamilo Chamilo

Weakness Type

CWE-352

References