Logic Vulnerability in Chamilo Learning Management System

CVE-2025-52469

What is CVE-2025-52469?

In the Chamilo Learning Management System, a logic flaw in the social network module's friend request workflow prior to version 1.11.30 allows an authenticated user to bypass standard mechanisms. By directly invoking the AJAX endpoint, an attacker can add any user as a friend, including non-existent accounts. This exploitation results in a breakdown of access control and compromises the integrity of social interactions within the platform, raising significant privacy concerns. The issue has been resolved in the subsequent release.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References