Lucene search

K
osvGoogleOSV:CVE-2023-34960
HistoryAug 01, 2023 - 2:15 a.m.

CVE-2023-34960

2023-08-0102:15:10
Google
osv.dev
9
cve-2023-34960
command injection
chamilo
wsconvertppt
soap api
powerpoint

AI Score

8.3

Confidence

High

EPSS

0.901

Percentile

98.9%

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name.

AI Score

8.3

Confidence

High

EPSS

0.901

Percentile

98.9%