Lucene search

GoogleOSV:CVE-2023-34959

HistoryJun 08, 2023 - 7:15 p.m.

CVE-2023-34959

2023-06-0819:15:10

Google

osv.dev

cve-2023-34959

chamilo

server-side request forgery

ssrf attack

information disclosure

crafted requests

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.8%

JSON

An issue in Chamilo v1.11.* up to v1.11.18 allows attackers to execute a Server-Side Request Forgery (SSRF) and obtain information on the services running on the server via crafted requests in the social and links tools.

CPENameOperatorVersion
chamilo-lmseq1.10.x.pre-doctrine
chamilo-lmseq1.11.6-alpha.1
chamilo-lmseq1.9.8
chamilo-lmseqCHAMILO_1_9_6_STABLE
chamilo-lmseqCHAMILO_1_9_2_STABLE_QUARTER
chamilo-lmseq1.11.8
chamilo-lmseqCHAMILO_1_8_6_2_STABLE
chamilo-lmseqCHAMILO_1_8_7_RC_1
chamilo-lmseq1.11.12
chamilo-lmseqCHAMILO_1_9_0_ALPHA_2

Name	Operator	Version
chamilo-lms	eq	1.10.x.pre-doctrine
chamilo-lms	eq	1.11.6-alpha.1
chamilo-lms	eq	1.9.8
chamilo-lms	eq	CHAMILO_1_9_6_STABLE
chamilo-lms	eq	CHAMILO_1_9_2_STABLE_QUARTER
chamilo-lms	eq	1.11.8
chamilo-lms	eq	CHAMILO_1_8_6_2_STABLE
chamilo-lms	eq	CHAMILO_1_8_7_RC_1
chamilo-lms	eq	1.11.12
chamilo-lms	eq	CHAMILO_1_9_0_ALPHA_2

Rows per page:

1-10 of 671

References

github.com/chamilo/chamilo-lms/commit/cc278f01864948b1fb160e03f0a3dc0875d5f81f

github.com/chamilo/chamilo-lms/commit/ea5791ff8ce6ea45148a171b0da5348a7c415e6f

github.com/chamilo/chamilo-lms/commit/ed946908fef23e8aa4cefc28f745f3cd6710099f

support.chamilo.org/projects/1/wiki/Security_issues#Issue-111-2023-04-20-Moderate-impact-Low-risk-Multiple-blind-SSRF-in-links-and-social-tools

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.8%

JSON

Related for OSV:CVE-2023-34959