Threats Tagged 'ghsa-xf7w-4v4m-pq7h'

1 threat

Threats Tagged 'ghsa-xf7w-4v4m-pq7h'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.2%	CVE-2026-114388chamilo-lms · Missing Authorization Medium6.9EPSS 0.2%2026-10-21CVE Database V5CVE-2026-114388 Chamilo LMS versions from 2.0.0-alpha.1 up to but not including 2.0.0-RC.3 have a missing access control vulnerability in the GradebookController. This flaw allows unauthenticated users to modify gradebook certificates by accessing the set_default_certificate endpoint with arbitrary course and document IDs. The vulnerability has a medium severity with a CVSS score of 6.9. EPSS 0.2%Vulnerability chamilo #ghsa-xf7w-4v4m-pq7h	CVE Database V5	2026-10-21

Showing 1–1 of 1 result