Threats Tagged 'ghsa-h28r-m2q7-jx9p'

1 threat

Threats Tagged 'ghsa-h28r-m2q7-jx9p'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.2%	CVE-2026-114390chamilo-lms · Missing Authorization Medium6.9EPSS 0.2%2026-10-21CVE Database V5CVE-2026-114390 Chamilo LMS from 2.0.0-alpha.1 before 2.0.0-RC.3 contains a missing authorization vulnerability in legacy AJAX handlers under public/main/inc/ajax/ that exposes user names and certificates. Unauthenticated or low-privileged users can call actions like get_users_by_group_course, user_by_all_roles, and export_all_certificates to harvest user names and other learners' certificate PDFs. EPSS 0.2%Vulnerability chamilo #ghsa-h28r-m2q7-jx9p	CVE Database V5	2026-10-21

Showing 1–1 of 1 result