PT-2021-19606 · Chamilo · Chamilo

Published 2021-04-30 · Updated 2021-05-17 · CVE-2021-31933

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AC:L/AV:N/A:H/C:H/I:H/PR:H/S:U/UI:N

Name of the Vulnerable Software and Affected Versions: Chamilo versions prior to 1.11.14

Description: A remote code execution issue exists due to improper input sanitization of a parameter used for file uploads and improper file-extension filtering for certain filenames, such as .phar or .pht. A remote authenticated administrator can upload a file containing arbitrary PHP code into specific directories via directory traversal in main/inc/lib/fileUpload.lib.php to achieve PHP code execution.

Recommendations: For versions prior to 1.11.14, update to a version that includes the fix for this issue to prevent remote code execution. As a temporary workaround, consider restricting access to the fileUpload.lib.php file or disabling the file upload functionality until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-706

Related Identifiers

CVE-2021-31933

Affected Products

Chamilo

References · 8

• 🔥 http://packetstormsecurity.com/files/162572/Chamilo-LMS-1.11.14-Remote-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/49867 · Exploit
• https://github.com/chamilo/chamilo-lms/commit/f65d065061a77bb2e84f73217079ce3998cf3453 · Patch
• https://github.com/chamilo/chamilo-lms/commit/229302139e8d23bf6862183cf219b967f6e2fbc1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-31933 · Security Note
• https://osv.dev/vulnerability/CVE-2021-31933 · Vendor Advisory
• https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-48-2021-04-17-Critical-impact-high-risk-Remote-Code-Execution · Vendor Advisory
• https://t.me/cvenotify/14458 · Telegram Post