CVE-2023-34962

50th percentile - higher than 50% of all known CVEs

Incorrect access control in Chamilo v1.11.x up to v1.11.18 allows a student to arbitrarily access and modify another student's personal notes.

This vulnerability may lead to privacy breaches and compromise the security of students' personal data within the organization.

It is recommended to upgrade to the latest version of Chamilo to mitigate this security flaw.