Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2022-40407 - Vulnerability Database

Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2022-40407

High

Reference: CVE-2022-40407

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-40407

Title: Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability

Overview:

A zip slip vulnerability in the file upload function of Chamilo v1.11 allows attackers to execute arbitrary code via a crafted Zip file.