Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Chamilo Missing Authorization Vulnerability - CVE-2025-59544 - Vulnerability Database
Chamilo

Chamilo Missing Authorization Vulnerability - CVE-2025-59544

Medium
Reference: CVE-2025-59544
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-59544
Title: Chamilo Missing Authorization Vulnerability
Overview:

Chamilo is a learning management system. Prior to version 1.11.34 the functionality for the user to update the category does not implement authorization checks for the quotcategory_idquot parameter which allows users to update the category of any user by replacing the quotcategory_idquot parameter. This issue has been patched in version 1.11.34.