VYPR
← All advisories
High severity8.8NVD Advisory· Published Apr 15, 2022· Updated Jun 17, 2026

CVE-2022-27426

CVE-2022-27426

Description

A Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the internal network and execute arbitrary system commands via a crafted Phar file.

Affected products

3
  • Chamilo/Lms2 versions
    cpe:2.3:a:chamilo:chamilo_lms:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:chamilo:chamilo_lms:*:*:*:*:*:*:*:*range: >=1.11.0,<=1.11.16
    • (no CPE)range: v1.11.13
  • Chamilo/LMSdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.