Server-Side Request Forgery in Chamilo LMS Affects Learning Management System
CVE-2026-31941
7.7HIGH
What is CVE-2026-31941?
Chamilo LMS is susceptible to a Server-Side Request Forgery (SSRF) due to its Social Wall feature. It accepts user input through the social_wall_new_msg_main POST parameter, allowing engineers to perform unauthorized HTTP requests to both internal and external URLs. This security flaw could enable authenticated attackers to access internal services, conduct port scans, and exploit cloud instance metadata. The vulnerability has been rectified in versions 1.11.38 and 2.0.0-RC.3.
Affected Version(s)
chamilo-lms < 1.11.38 < 1.11.38
chamilo-lms >= 2.0.0-alpha.1, < 2.0.0-RC.3 < 2.0.0-alpha.1, 2.0.0-RC.3