Critical severity9.8NVD Advisory· Published Nov 28, 2023· Updated Jun 17, 2026
CVE-2023-3545
CVE-2023-3545
Description
Improper sanitisation in main/inc/lib/fileUpload.lib.php in Chamilo LMS <= v1.11.20 on Windows and Apache installations allows unauthenticated attackers to bypass file upload security protections and obtain remote code execution via uploading of .htaccess file. This vulnerability may be exploited by privileged attackers or chained with unauthenticated arbitrary file write vulnerabilities, such as CVE-2023-3533, to achieve remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
3- github.com/chamilo/chamilo-lms/commit/dc7bfce429fbd843a95a57c184b6992c4d709549nvdPatch
- starlabs.sg/advisories/23/23-3545/nvdExploitThird Party Advisory
- support.chamilo.org/projects/chamilo-18/wiki/security_issuesnvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.