Remote Code Execution Vulnerability in Chamilo LMS by Chamilo Foundation

CVE-2021-35413

What is CVE-2021-35413?

A vulnerability exists in the Chamilo LMS, specifically within the course_intro_pdf_import.php script, that allows authenticated attackers to execute arbitrary code. By manipulating a crafted .htaccess file, these attackers can exploit the flaw to potentially gain unauthorized access to the server, compromising the integrity and confidentiality of the system. It is crucial for users of Chamilo LMS to apply security patches and remain vigilant against such exploits to maintain a secure environment.

References