CVE-2023-34958

creationtimestamp| type| source ---|---|--- 2023-06-08 22:16:08+00:00| seen| https://t.me/cibsecurity/65077 2025-01-06 21:38:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/255...

CVE-2023-34958

Incorrect access control in Chamilo 1.11. up to 1.11.18 allows a student subscribed to a given course to download documents belonging to another student if they know the document's ID...

CVE-2023-34958

CVE-2023-34958 concerns Chamilo LMS versions 1.11.* up to 1.11.18. The vulnerability is described as an inadequate access control that allows a student enrolled in a course to download documents belonging to another student if they know the document’s ID. This is an information disclosure issue r...

CVE-2023-34958

Incorrect access control in Chamilo 1.11. up to 1.11.18 allows a student subscribed to a given course to download documents belonging to another student if they know the document's ID...