CVE-2023-4224

Summary

CVE-2023-4224 is a vulnerability affecting Chamilo Learning Management System (LMS) versions prior to 1.11.24. This issue involves an unrestricted file upload feature in the "/main/inc/ajax/dropbox.ajax.php" file. Malicious users with learner roles can exploit this flaw to upload PHP files, resulting in remote code execution for authenticated attackers. This vulnerability poses a significant risk, allowing an attacker to gain unauthorized access and potentially steal or manipulate sensitive data within the Chamilo LMS environment.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.