Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Chamilo Missing Authorization Vulnerability - CVE-2026-33708 - Vulnerability Database
Chamilo

Chamilo Missing Authorization Vulnerability - CVE-2026-33708

Medium
Reference: CVE-2026-33708
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-33708
Title: Chamilo Missing Authorization Vulnerability
Overview:

Chamilo LMS is a learning management system. Prior to 1.11.38 the get_user_info_from_username REST API endpoint returns personal information (email first name last name user ID active status) of any user to any authenticated user including students. There is no authorization check. This vulnerability is fixed in 1.11.38.