← Database

CVE-2022-27426

HIGH CVSS: 8.8 Published: 2022-04-15 Modified: 2026-06-17

Description

A Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the internal network and execute arbitrary system commands via a crafted Phar file.

Affected Platforms

Chamilo Chamilo Lms

Weakness Type

CWE-918

References