Vulnerabilidades em Chamilo
88 resultadosAnálise Vexday
Chamilo acumula 14 vulnerabilidades no histórico, com 3 classificadas como críticas, predominantemente relacionadas a upload de arquivos (CWE-434); apesar disso, nenhuma está sob exploração ativa conhecida no momento, e não há registros recentes que indiquem escalation do risco nos últimos três meses.
CVE-2026-33703HIGHChamilo LMS Critical IDOR: Any Authenticated User Can Extract All Users’ Personal Data and API TokensEPSS 0.2%CVE-2026-33706HIGHChamilo LMS has a REST API Self-Privilege Escalation (Student → Teacher)EPSS 0.2%CVE-2025-59544MEDIUMChamilo: Unauthorized access to update category of any userEPSS 0.2%CVE-2025-66447NONEChamilo LMS has validation-less redirect on login pageEPSS 0.2%CVE-2025-52563MEDIUMChamilo: Reflected XSS via page parameterEPSS 0.2%CVE-2025-59541HIGHChamilo: CSRF Vulnerability in Project DeletionEPSS 0.2%CVE-2026-32893MEDIUMChamilo LMS has Reflected XSS via Unsanitized http_build_query() in Exercise Question List PaginationEPSS 0.1%CVE-2026-33141MEDIUMChamilo LMS has an IDOR in REST API Stats Endpoint Exposes Any User's Learning DataEPSS 0.1%