CVE-2021-32925

admin/userimport.php in Chamilo 1.11.x reads XML data without disabling the ability to load external entities...

CVE-2021-32925

admin/userimport.php in Chamilo 1.11.x reads XML data without disabling the ability to load external entities...

CVE-2021-32925

CVE-2021-32925 affects Chamilo LMS, specifically Chamilo 1.11.x, where admin/user_import.php reads XML data without disabling external entities, enabling an XML External Entity (XXE) issue. Public sources in the connected data confirm the vulnerability class and affected module/file, with NVD rep...