← All advisories

Medium severity6.5NVD Advisory· Published May 13, 2021· Updated Jun 17, 2026

CVE-2021-32925

CVE-2021-32925

Description

admin/user_import.php in Chamilo 1.11.x reads XML data without disabling the ability to load external entities.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Chamilo/Chamilo2 versions
cpe:2.3:a:chamilo:chamilo:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:chamilo:chamilo:*:*:*:*:*:*:*:*range: >=1.11.0,<=1.11.16
- (no CPE)
Chamilo/Lmsllm-fuzzy
Range: 1.11.x

Patches

Vulnerability mechanics

References

4

github.com/chamilo/chamilo-lms/commit/e71437c8de809044ba3ae1b181d70857c050a3e9nvdPatchThird Party Advisory
github.com/andrejspuler/writeups/blob/main/chamilo-lms/README.mdnvdExploitMitigationThird Party Advisory
support.chamilo.org/projects/1/wiki/Security_issuesnvdThird Party Advisory
www.php.net/manual/en/function.libxml-disable-entity-loader.phpnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.