Chamilo LMS Htaccess File Upload Security Bypass

CVE-2023-3545

What is CVE-2023-3545?

An improper sanitisation flaw in the main/inc/lib/fileUpload.lib.php file of Chamilo LMS allows unauthenticated attackers to bypass security protocols designed to regulate file uploads. This vulnerability specifically affects installations on Windows and Apache, enabling malicious users to upload an .htaccess file, resulting in potential remote code execution. It can be exploited in conjunction with other vulnerabilities, like unauthenticated arbitrary file write issues, to escalate the attack and gain unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References