CVE-2023-34944

Summary

CVE-2023-34944 is a severe vulnerability affecting the Chamilo learning management system versions 1.11.* up to 1.11.18. An attacker can exploit an arbitrary file upload flaw in the /fileUpload.lib.php component to upload a specially crafted SVG file and execute arbitrary code. This vulnerability poses a significant risk, as it could allow an attacker to gain unauthorized access, steal sensitive data, or even take control of the affected system. It is strongly recommended that Chamilo users upgrade to a patched version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.