Cross-Site Request Forgery in Chamilo LMS Affects User Privacy
CVE-2024-30617

Currently unrated

Key Information:

Vendor

Chamilo

Vendor
CVE Published:
4 November 2024

What is CVE-2024-30617?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in Chamilo LMS version 1.11.26. This security issue enables attackers to execute unauthorized requests, leading to the potential posting of fake content on users' social walls without their consent or knowledge. As a result, users may unknowingly share false information, jeopardizing their privacy and the integrity of the platform. It's crucial to mitigate this risk to maintain user trust and secure the application.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-30617 : Cross-Site Request Forgery in Chamilo LMS Affects User Privacy