CVE-2023-34959

MediumCVSS 5.3

Published: 08/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.61%

44th percentile - higher than 44% of all known CVEs

Summary

Versions of Chamilo from v1.11.* up to v1.11.18 have a vulnerability that allows attackers to perform a Server-Side Request Forgery (SSRF). This can lead to obtaining information about services running on the server through crafted requests in the social and links tools.

Risk Assessment

This vulnerability may lead to the exposure of sensitive information about the server's infrastructure, increasing the risk of further attacks on the system.

Recommendation

It is recommended to update Chamilo to the latest version to mitigate this vulnerability and to monitor server logs for potential attack attempts.

Original NVD description (English source)

An issue in Chamilo v1.11.* up to v1.11.18 allows attackers to execute a Server-Side Request Forgery (SSRF) and obtain information on the services running on the server via crafted requests in the social and links tools.