CVE-2023-39582

MediumCVSS 4.9

Published: 01/09/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.55%

41th percentile - higher than 41% of all known CVEs

Summary

SQL Injection vulnerability in Chamilo LMS versions 1.11 through 1.11.20 allows a remote privileged attacker to obtain sensitive information via the import sessions functions.

Risk Assessment

The organization may be exposed to the disclosure of confidential data, which could lead to serious legal and reputational consequences.

Recommendation

It is recommended to update Chamilo LMS to the latest version to mitigate this vulnerability and conduct a security audit of the system.

Original NVD description (English source)

SQL Injection vulnerability in Chamilo LMS v.1.11 thru v.1.11.20 allows a remote privileged attacker to obtain sensitive information via the import sessions functions.