high8.8
CVE-2024-30616
Chamilo LMS 1.11.26 is vulnerable to Incorrect Access Control via main/auth/profile.
Impact
Chamilo LMS 1.11.26 is vulnerable to Incorrect Access Control via main/auth/profile. Non-admin users can manipulate sensitive profiles information, posing a significant risk to data integrity.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chamilo | Chamilo Lms | Version 1.11.26 |