Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Chamilo Authorization Bypass Through User-Controlled Key Vulnerability - CVE-2026-32930 - Vulnerability Database
Chamilo

Chamilo Authorization Bypass Through User-Controlled Key Vulnerability - CVE-2026-32930

High
Reference: CVE-2026-32930
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-32930
Title: Chamilo Authorization Bypass Through User-Controlled Key Vulnerability
Overview:

Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3 an Insecure Direct Object Reference (IDOR) vulnerability in the gradebook evaluation edit page allows any authenticated teacher to view and modify the settings (name max score weight) of evaluations belonging to any other course by manipulating the editeval GET parameter. This vulnerability is fixed in 1.11.38 and 2.0.0-RC.3.