Unknown · Chamilo Lms · CVE-2020-23127
**Name of the Vulnerable Software and Affected Versions**
Chamilo LMS version 1.11.10
**Description**
The issue is related to Cross Site Request Forgery (CSRF) via the `edit user` function, which can be exploited by targeting an admin user. This allows for unauthorized actions to be performed on behalf of the admin.
**Recommendations**
For Chamilo LMS version 1.11.10, consider disabling the `edit user` function until a patch is available to prevent CSRF attacks. Restrict access to admin user accounts to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.