VULNERABILITY INTELLIGENCE

CVE-2023-42239

CVSS score3.8 LOW

EPSS probability1.83%

CISA KEVNot currently listed

Published2025-01-13

Last modified2026-06-17

Description

Unrestricted file upload in `/main/inc/ajax/document.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.