PT-2021-3536

Name of the Vulnerable Software and Affected Versions Chamilo versions 1.11.x Description The issue is related to the admin/user import.php file in Chamilo, which reads XML data without properly disabling the ability to load external entities. This can lead to an XXE XML External Entity attack,...