CVE-2021-32925

admin/userimport.php in Chamilo 1.11.x reads XML data without disabling the ability to load external entities...

Chamilo LMS < 1.11.16 Multiple Vulnerabilities

Chamilo LMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:chamilo:chamilolms"; if...

CVE-2021-32925

admin/userimport.php in Chamilo 1.11.x reads XML data without disabling the ability to load external entities...

CVE-2021-32925

CVE-2021-32925 affects Chamilo LMS, specifically Chamilo 1.11.x, where admin/user_import.php reads XML data without disabling external entities, enabling an XML External Entity (XXE) issue. Public sources in the connected data confirm the vulnerability class and affected module/file, with NVD rep...