ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2025-50187
9.8критическая

CVE-2025-50187

Описание

Chamilo is a learning management system. Prior to version 1.11.28, parameter from SOAP request is evaluated without filtering which leads to Remote Code Execution. This issue has been patched in version 1.11.28.

Затрагиваемое ПО
Chamilo Chamilo lms
CVSS
Балл9.8 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.28https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-356v-7xg2-3678